Skip to content
Cloudflare Docs

Configure rule notifications

After configuring one or multiple rule types in Magic Network Monitoring, customers can also choose to receive notifications via email, webhook, or PagerDuty when a rule is triggered.

Customers can configure multiple rule types and alerts together to create layers of DDoS protection based on their network environment and their security needs.

You can read Cloudflare's Notifications documentation for more information on our notification platform including:

Magic Network Monitoring notification configuration fields

FieldDescription
Notification nameThe name of the Magic Network Monitoring notification (MNM) for the rule type that was selected.
Description (optional)The description of the MNM notification.
WebhooksThe webhook(s) that will receive the MNM notification.
Notification emailThe email(s) that will receive the MNM notification.

Rule Auto-Advertisement notifications

Webhook, PagerDuty, and email notifications are sent following an auto-advertisement attempt for all prefixes inside the flagged rule.

You will receive the status of the advertisement for each prefix with the following available statuses:

  • Advertised: The prefix was successfully advertised.
  • Already Advertised: The prefix was advertised prior to the auto advertisement attempt.
  • Delayed: The prefix cannot currently be advertised but will attempt advertisement. After the prefix can be advertised, a new notification is sent with the updated status.
  • Locked: The prefix is locked and cannot be advertised.
  • Could not Advertise: Cloudflare was unable to advertise the prefix. This status can occur for multiple reasons, but usually occurs when you are not allowed to advertise a prefix.
  • Error: A general error occurred during prefix advertisement.

Configure static threshold notifications

To configure static threshold notifications:

  1. Log in to the Cloudflare dashboard ↗, and select your account.
  2. Go to Notifications > Add.
  3. Select Magic Transit from the product dropdown menu.
  4. Find the Magic Network Monitoring: Volumetric Attack alert, and select Select.
  5. Fill in the notification configuration details.
  6. Select Save.

Configure dynamic threshold notifications

To configure dynamic threshold notifications:

  1. Log in to the Cloudflare dashboard ↗, and select your account.
  2. Go to Notifications > Add.
  3. Select Magic Transit from the product dropdown menu.
  4. Find the Magic Network Monitoring: Volumetric Attack alert, and select Select.
  5. Fill in the notification configuration details.
  6. Select Save.

Configure sFlow DDoS attack notifications

To configure sFlow DDoS attack notifications:

  1. Log in to the Cloudflare dashboard ↗, and select your account.
  2. Go to Notifications > Add.
  3. Select Magic Transit from the product dropdown menu.
  4. Find the Magic Network Monitoring: DDoS Attack alert, and select Select.
  5. Fill in the notification configuration details.
  6. Select Save.