Get admin notification from logs?

Product Support

AI-generated summary

The discussion revolves around the possibility of admins/moderators receiving push notifications from the ‘Logs & screening’ section, specifically for log entries related to email address changes. piffy initiated the conversation, seeking a way to identify compromised accounts in advance. piffy shared a Data Explorer query to check for such log entries, but it doesn’t provide push notifications. JammyDodger suggested refining the query and using it with a recurring automation to send PMs with the results, effectively creating a ‘push notification’ system. The proposed solution involves scheduling the automation to match the time interval in the query, such as every 30 minutes, and selecting ‘skip if no results’ to avoid unnecessary notifications.

1

Question: Is there a way for admins/moderator to get some kind of push notification from the “Logs & screening” section? Like a message from the Automation plugin or something?

Context: We have had a couple incidents where old accounts are compromised and the email is changed. These accounts are then being used to message people and scam users.

I noticed that the add email log entries can be used to identify this issue in advance, though I don’t want to constantly be checking it. Is there a way to get a notification when this type of log entry shows up?

3

I got this data explorer query that I added as a report that can allow checking but doesn’t do a “push” notification when there’s an update.

SELECT 
    uh.action,
    acting.username AS acting_user,
    target.username AS target_user,
    uh.updated_at
FROM user_histories uh
LEFT JOIN users acting ON acting.id = uh.acting_user_id
LEFT JOIN users target ON target.id = uh.target_user_id
WHERE uh.action = 88
  AND uh.updated_at > CURRENT_DATE - INTERVAL '7 days'
ORDER BY uh.updated_at DESC
LIMIT 100
4

Could you refine that query slightly and rig it up to a recurring ‘schedule a PM with data explorer results’ automation? If you select ‘skip if no results’ and adjust the automation frequency to match the time interval in the query then it may work as a ‘push notification’ type ping?

Something like this (with a recurring automation frequency of 30 minutes):

SELECT 
    uh.created_at AS "email updated",
    uh.acting_user_id,
    uh.target_user_id
FROM user_histories uh
WHERE uh.action = 88
  AND uh.updated_at > CURRENT_TIMESTAMP - INTERVAL '30 minutes'
ORDER BY 1 DESC