A response, such as an email notification or webhook, to alert triggering or report completion. Alert actions can include search metadata or result details in notifications. Alert actions are knowledge objects with permissions that are configurable separately from those of alerts.
For more information
In the Alerting Manual: