iRule or REST API request to send automated notification for violation

Hi, I was wondering for a solution that whenever a violation is detected by the ASM, an email notification should be sent notifying the administrator. I think its possible using iRule, but then came across an article stating that this may lead to DOS when a huge amount of attack traffic is sent to the F5 box. Is it true? Also, is it possible to use the F5 API to handle the email notification - any solution around that ?