Skip to content
This is an archived version of the documentation downloaded from LogScale Documentation Archives. Up to date documentation, and documentation for later versions, is available on LogScale Documentation

#### Errors when Using Live join() Functions

There is a known limitation about live queries that use `join()` functions — the details are explained at summary_query-joins-performance.

The limitation means that Legacy Alerts cannot be expected to work in combination with these particular query functions.

You should be aware of this when you intend to create an alert with `join()` functions, as the alert may not trigger as expected.

The UI warns you about this behaviour before you save the alert.

Figure 136. Warning Using Live join()

In such cases, creating a scheduled search instead would better achieve the expected result.

#### Enter search term