How to Set up Custom Admin Alert Rules in Google Workspace

Quick and easy-to-follow guide for Google Workspace administrators

What are Google Workspace admin alerts

By default, Google tries to stay on top of potential issues and other significant events related to your Google Workspace account and alert administrators.
You can choose to be notified about specific events, or turn off notifications for other events.

When to create and enable custom admin alerts

Some premade alerts are easy to enable right now, but you can make your own rules based on things you can see in your Google Workspace audit logs if you need something else.

How to create and enable custom admin alerts step-by-step with images

Step 1

In the Google Admin console at https://admin.google.com, in the menu on the left, click Reporting, then Audit, and then choose the audit log that records the type of event you’re interested in.

You can see a list of all audit logs and what they do here.

Step 2

On top of the page, click + Add a filter to narrow down the scope of the log search so that it only finds precisely what you want to track.

Step 3

The filter provides a few options to select from when narrowing down the scope of the search. You can make use of one or more options in a single search.

Step 4

For example, select Event name in the Admin audit log.

You can search for specific types of events occurring in the Google Admin console. These events are actions that admins perform. For example, creating Groups, deleting Groups, updating Gmail settings, and so on. Select one and click Apply.

Step 5

In this case, we selected Group Creation. We will use that to set up a notification whenever any admin creates a Group in our Google Workspace account. You can click + Add a filter to add more filters.