AsyncAPI channel · Palo Alto Networks · SASE Multitenant Notifications

/notification/incident

Channel for security incident notifications. Triggered when SASE detects a security incident such as a policy breach, threat detection, or anomalous activity within a tenant's network perimeter. Incident notifications include severity classification, affected tenant context, and descriptive details for triage and response.

Open source AsyncAPI → All Palo Alto Networks channels Palo Alto Networks provider profile
Provider: Palo Alto Networks AsyncAPI: v2.6.0 Spec: SASE Multitenant Notifications Operations: 1 Messages: 1

Channel address

/notification/incident

Operations

onIncidentNotification
Security incident notification

Messages

IncidentNotification
Webhook payload sent when a security incident is detected within a SASE tenant. Contains the incident classification, severity, affected tenant context, and descriptive information for triage.
Content-Type: application/json

About AsyncAPI

The AsyncAPI specification describes event-driven APIs the way OpenAPI describes request/response APIs. A channel is the named pipe — a webhook URL, a Kafka topic, a WebSocket route, an MQTT subject — that producers and consumers publish or subscribe to. Each channel carries one or more messages with structured payloads, and an operation declares whether a given party sends or receives on that channel.

Browse every event-driven channel on the APIs.io network or compare with the broader Naftiko capability, Agent Skill, and MCP server surfaces of the same providers.