UnsavedFilterAlert is a datatype for an unsaved filter alert. It's used by the generateFilterAlertFromTemplate() and generateFilterAlertFromPackageTemplate() query fields.

Table: UnsavedFilterAlert

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For return datatypes, this indicates that you must specify which fields you want returned in the results.
Table last updated: Feb 10, 2026
actions[Action]yes Long-TermList of unique identifiers for actions to fire on query result. See Action.
descriptionstring  Long-TermThe description of the filter alert.
enabledbooleanyes Long-TermWhether the filter alert is enabled.
labels[string]yes Long-TermLabels attached to the filter alert.
namestringyes Long-TermThe name of the filter alert.
queryStringstringyes Long-TermThe LogScale query to execute.
throttleFieldstring  DeprecatedThe field on which to throttle. This can be set only if throttleTimeSeconds is set. Filter alerts now support multiple throttle fields. This field will be removed at the earliest in version 1.279. Use instead the throttleFields field.
throttleFields[string]  Long-TermThe fields on which to throttle. This can be set only if throttleTimeSeconds is set.
throttleTimeSecondslong  Long-TermThe throttle time in seconds.