This is basically correct. If you are currently getting Alerts for failed pings, you can “ingest” that alert into Automated Remediation by using the Alert Body from the Alert itself, and/or by using the “Trigger Category” as well. In this case, since your ping triggers get a custom name, it’s easier to work with the body in this instance. This is what an alert like this would look like:
So you could says:
Conditions: Alert Body > Contains > “Test Ping Trigger” (or whatever you named it)
Customer: Is > [client name]
Then the run actions can be whatever you want, including sending the email as you had it.
Let me know if you run into any issues with getting that to work as you’d expect.