A type of alert that monitors and evaluates data over a specified time window, triggering one or more actions when the query returns a result. Requires queries with aggregate functions and a throttle period.