FilterAlert is a datatype for a filter alert.

This datatype is used by several mutation fields: createFilterAlert(); disableFilterAlertV2(); enableFilterAlertV2(); and updateFilterAlert(). It's also used by a few others: addFilterAlertLabels(); removeFilterAlertLabels(); and clearErrorOnFilterAlert(). Plus, it's used by some core datatypes (e.g., Repository, View, etc.).

Table: FilterAlert

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results. 
Table last updated: Oct 14, 2026 
actionsActionyes Long-Term List of unique identifiers for actions to fire on query result. See Action.
allowedActionsAssetActionyes Short-Term List of actions allowed on which to filter query results. See AssetAction .
createdInfoAssetCommitMetadata  Long-Term Metadata related to the creation of the filter alert. See AssetCommitMetadata.
descriptionString  Long-Term Description of the filter alert.
enabledBooleanyes Long-Term Whether the filter alert is enabled.
idStringyes Long-Term The unique identifier of the filter alert.
labelsStringyes Long-Term Labels attached to the filter alert.
lastErrorString  Long-Term Last error encountered while running the filter alert.
lastErrorTimeLong  Long-Term Unix timestamp for last error.
lastSuccessfulPollLong  Long-Term Unix timestamp for last successful poll of the filter alert query. If this is not quite recent, then the alert might be having problems.
lastTriggeredLong  Long-Term Unix timestamp for last execution of trigger.
lastWarningsStringyes Long-Term Last warnings encountered while running the filter alert.
modifiedInfoModifiedInfoyes Long-Term User or token used to modify the asset. See ModifiedInfo. This is a preview and subject to change.
nameStringyes Long-Term The name of the filter alert.
packagePackageInstallation  Long-Term The package of which the alert was installed. See PackageInstallation.
packageIdVersionedPackageSpecifier  Long-Term The unique identifier of the package of which the alert was installed. VersionedPackageSpecifier is a scalar.
queryOwnershipQueryOwnershipyes Long-Term Ownership of the query run by this alert. See QueryOwnership.
queryStringStringyes Long-Term The LogScale query to execute.
resourceStringyes Short-Term The resource identifier for this filter alert.
throttleFieldString  Deprecateddeprecated in 1.282The field on which to throttle. This can be set only if throttleTimeSeconds is set. Filter alerts now support multiple throttle fields. This field will be removed at the earliest in version 1.279. Use instead the throttleFields field.
throttleFieldsStringyes Long-Term The fields on which to throttle. This can be set only if throttleTimeSeconds is set.
throttleTimeSecondsLong  Long-Term The throttle time in seconds.
yamlTemplateYAMLyes Long-Term The yaml specification of the filter alert. YAML is a scalar.