The UnsavedAggregateAlert datatype includes various settings.

Table: UnsavedAggregateAlert

ParameterTypeRequired[a]DefaultDescription
namestringyes Name of the aggregate alert.
descriptionstring  Description of the aggregate alert.
queryStringstringyes LogScale query to execute.
actions[Action]yes List of actions to fire on query result.
labels[string]yes Labels attached to the aggregate alert.
enabledbooleanyes Flag indicating whether the aggregate alert is enabled.
throttleTimeSecondslongyes Throttle time in seconds.
throttleFieldstring  A field on which to throttle. Can only be set if throttleTimeSeconds is set.
queryTimestampTypeQueryTimestampTypeyes Timestamp type to use for a query.
triggerModeTriggerModeyes Trigger mode used for triggering the alert.
searchIntervalSecondslongyes Search interval in seconds.

[a] Some arguments may be required, as indicated in this column. For some fields, this column indicates that a result will always be returned for it.