> This page is for Applications Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.humansecurity.com/llms.txt.

# Alerts & Notifications actions

**Alerts & Notifications actions** let you automatically send alerts to yourself or your team whenever Policy Rule conditions are met. You can learn how to create alerts and notifications actions with this article.

> **Note**
>
> These actions only support [acccount-related events](/applications/about-the-accounts-overview-dashboard).

## Prerequisites

* Appropriate [**role permissions**](/applications/role-permissions#sightline-cyberfraud-defense) to add and manage actions. By default, this is an **Admin** in Sightline.
* An integration with Slack. See our [Slack integration guide](/applications/slack-integration) for more information.
* If you want to send custom data, you need existing **custom parameters** first. See [Set custom parameters](/applications/set-custom-parameters) for more information.

## Create an alerts or notifications action

1. Navigate to **Sightline Cyberfraud Defense > Settings > Mitigation > Custom Action Settings.**
2. Under the **Alerts & Notifications** section, click the **integration** you want to create an action for.
3. Click **+ Add Action.**
4. Complete the following fields:
   * **Action name:** The name of the action and how it will appear in your HUMAN account.
   * **Cooldown duration:** The length of time that Sightline should wait to trigger this action each time it detects a match on the Policy Rule it's assigned to.
   * **Duration unit:** The unit of time for the **cooldown duration.**
   * **Integration:** Select the integration you want to use.
   * **Application data source:** The application you want to send data from. You can only select one application per action.
   * **Event type:** The type of event you want to send alerts about.
5. Click **Save changes.**

Your notification action has been created. Next, be sure to [add it to a policy rule.](#add-an-alerts-or-notifications-action-to-a-policy-rule)

### Add an alerts or notifications action to a policy rule

Once you have an alerts action, we recommend adding it to a [**policy rule**](/applications/create-account-policy-rules).

> **Note**
>
> Be sure your policy rule’s **application** and **event type** match the ones you chose above. Otherwise, the action won’t appear when you try to add it to the rule.

1. Navigate to **Sightline Cyberfraud Defense > Policies > Account Policies.**
2. Select a rule to edit or create a new rule. See [our article](/applications/create-account-policy-rules) for more on creating policy rules.
3. From the **Actions** menu, click and drag **Alerts & Notifications** to the **THEN** field.

![](/_fern-img/1021e7f34db87d2ecaf8eca2af2cbac15c84e3760a97241b2b764706def30ce6.webp)

4. Finish any other changes to your policy rule, then click **Simulate** rule.
5. Click **Save changes.**

Now, whenever Sightline detects an attack that matches the conditions in that policy rule, it will send a notification about that attack to your chosen integration.