real-time alert

noun

An alert that is based on a real-time search.

When you configure an alert for a real-time search, the search runs continuously in the background once the search is saved. The advantage of real-time alerts is that alert actions are triggered the moment that the alert conditions are satisfied.

In contrast, alerts based on standard searches run on a regular schedule, such as every 10 minutes, every hour, or every day at midnight. When these searches are triggered, a certain amount of time may have elapsed since the alerting condition was met.

Because real-time alerts run continuously in the background, they place more overhead on system performance. If your system is running slow, and you have alerts that do not require quick response, you may want to reconfigure them so they are based on scheduled searches instead.

For more information

In the User Manual:

• Search and report in real time
• Create alerts
• Alert examples

• Alphabetical
• By Topic