About the Alert Center
As a G Suite administrator, use the Alert Center to view notifications about potential issues within your domain, and take action to resolve the issues and protect your organization from security threats.
You can view a list of alerts from the Alert Center, and then click any item in the list to view details about the alerts.
If your organization uses G Suite Enterprise, you can also start an investigation from the Alert Center by linking directly to the security investigation tool. Using the investigation tool, you can then make adjustments to your Google Admin console security settings if needed, or take other actions in response to the alert.
The Alert Center includes several alert types, including the following:
- Compromised device
- Suspicious device activity
- User-reported phishing
- Attacks caused by bad whitelists
- Google Operations
Note: Alerts are retained in the Alert Center for approximately 10 years. An API will be available soon that will enable you to delete alerts before the retention period expires.
How the Alert Center is different from administrator email alerts
- The Alert Center enables you to view alerts and alert details directly in the Google Admin console. It provides critical alerts that are based on technologies such as machine learning. The Alert Center includes additional in-depth details that enable you to take action to resolve numerous issues that might affect your domain.
- Administrators can use administrator email alerts to set up email notifications—for example, to notify admins of suspicious login attempts, or to notify them of service-setting changes by other administrators. You can customize these alerts in the Reports section of the Google Admin console.