CreateAlert is an input datatype for creating an alert. It's used by the createAlert() mutation field.

Table: CreateAlert

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results. 
Table last updated: Oct 14, 2026 
actionsStringyes Long-Term List of unique identifiers of actions to execute on query result.
descriptionString  Long-Term Description of the alert.
enabledBoolean  Long-Term Flag indicating whether the alert is enabled.
labelsStringyes Long-Term Labels attached to the alert.
nameStringyes Long-Term Name of the alert.
queryOwnershipTypeQueryOwnershipType  Long-Term Ownership of the query run by this alert. If value is User, ownership will be based on the runAsUserId field. See QueryOwnershipType.
queryStartStringyes Long-Term Start of the relative time interval for the query.
queryStringStringyes Long-Term LogScale query to execute.
runAsUserIdString  Long-Term The alert will run with the permissions of the user corresponding to this unique identifier if the queryOwnershipType field is set to User. If the queryOwnershipType is set to Organization, whilst this field is set, this will result in an error. If not specified, the alert will run with the permissions of the calling user. It requires the ChangeTriggersToRunAsOtherUsers permission to set this field to a user id different from the calling user.
throttleFieldString  Long-Term Field on which to throttle.
throttleTimeMillisLongyes Long-Term Throttle time in milliseconds.
viewNameStringyes Long-Term Name of the view of the alert.