If you want to contain reports you can use Zones to do this. In each appliance group add the rules to it's own zone (you can name it the same as the appliance group). This will then give you a filterable value and you can even restrict specific login...
This means there is no traffic coming in on the GRE tunnel between the Flow Collector/SSA and the Purview appliance.
Please check/post the SSA/FC configuration to ensure that traffic is being mirrored properly.
You can also check the Purview Deploym...
Unfortunately most APIs like ours are not event driven; and therefore you will need a system polling both systems and keeping both up to date. Rather than use both APIs in a complex system just to get things to work I would suggest a different overal...
Can I ask why you are doing this from a switch and not a server? It seems to me that it is much easier to write a script to test your tftp server and then send out notification (syslog/email) if the tftp server fails and put it on a cronjob. Or even...
