Failed provisioning attempts search / email

My customer has a request to be notified when a provisioning or sync action fails.

At a minimum he wants to see a report about this.

Regarding the email I think the source owner should be notified when a provisioning task fails, but I have not seen any trigger or configuration for this.

Regarding the report, the search area is a bit tricky and I am yet to find the correct syntax to show all failed provisioning tasks for a specific source in a specific period of time. If someone has the syntax offhand that would be a great help.

Many thanks in advance

This search query should get you started:

type:provisioning AND status:FAILED AND created:[now-30d/d TO now] AND attributes.sourceName:PRISM

It returns all failed provisioning actions on the PRISM source for the the last 30 days.

For future reference, the Searchable Fields page in the Search docs is a very helpful guide to the searchable object data models.

Thank you

Just what I needed.