I am trying to setup DNS Zone alerting, so any generated DNS Zone Activity Log event sends out an email. I can get a similar alerts to work when using 'Metric' as the signal type within Condition (an alert is sent once dns records exceed a certain value), but unable to get DNS Zone changes to work when using Activity Log as the signal type.
Here is the Condition:
"Whenever the Administrative Activity Log "All Administrative operations" has "any" level, with "any" status and event is initiated by "any""
Am I missing something obvious here or approaching this from a wrong angle?