G Suite Alert types

Alert sources and types

Listed in the table below are the possible values for the source field, corresponding alert type names for type field and data types for the data field.

Learn more about these alert types from our support documentation.

Alert source Alert type Alert data
Domain wide takeout Customer takeout initiated DomainWideTakeoutInitiated
Gmail phishing Malware reclassification MailPhishing
Misconfigured whitelist BadWhitelist
Phishing reclassification MailPhishing
Suspicious message reported MailPhishing
User reported phishing MailPhishing

Customers who were part of Alert Center EAP may see the following deprecated type in their old alerts: PhishingSpike

User reported spam spike MailPhishing
Google identity Leaked password AccountWarning
Suspicious login AccountWarning
Suspicious login (less secure app) AccountWarning
Suspicious programmatic login AccountWarning
User suspended AccountWarning
User suspended (spam) AccountWarning
User suspended (spam through relay) AccountWarning
User suspended (suspicious activity) AccountWarning
Google Operations Google Operations GoogleOperations
State Sponsored Attack Government attack warning StateSponsoredAttack
Mobile device management Device compromised DeviceCompromised
Suspicious activity SuspiciousActivity
AppMaker Editor AppMaker Default Cloud SQL setup AppMakerSqlSetupNotification