The FilterAlert datatype includes a couple of settings.

Table: FilterAlert

ParameterTypeRequired[a]DefaultDescription
idstringyes The unique identifier of the filter alert.
namestringyes Name of the filter alert.
descriptionstring  Description of the filter alert.
queryStringstringyes LogScale query to execute.
actions[Action]yes List of ids for actions to fire on query result.
labels[string]yes Labels attached to the filter alert.
enabledbooleanyes Flag indicating whether the filter alert is enabled.
throttleTimeSecondslong  Throttle time in seconds.
throttleFieldstring  A field to throttle on. Can only be set if throttleTimeSeconds is set.
lastTriggeredlong  Unix timestamp for last execution of trigger.
lastErrorTimelong  Unix timestamp for last error.
lastErrorstring  Last error encountered while running the filter alert.
lastWarnings[string]yes Last warnings encountered while running the filter alert.
yamlTemplateYAMLyes YAML specification of the filter alert.
packageIdVersionedPackageSpecifier  The unique identifier of the package of which the alert was installed.
packagePackageInstallation  The package of which the alert was installed.
queryOwnershipQueryOwnershipyes Ownership of the query run by this alert.

[a] Some arguments may be required, as indicated in this column. For some fields, this column indicates that a result will always be returned for it.