Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Chronosphere
  4. API Docs
  5. LogscaleAlert
Viewing docs for Chronosphere v0.9.16
published on Friday, Jun 5, 2026 by Chronosphere
Schema (JSON)
chronosphereio/pulumi-chronosphere

chronosphere.LogscaleAlert

Viewing docs for Chronosphere v0.9.16
published on Friday, Jun 5, 2026 by Chronosphere
Schema (JSON)
chronosphereio/pulumi-chronosphere

    A LogScale alert that runs a saved LogScale query on a schedule and fires the configured logscale_action targets when the query returns results.

    Example Usage

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Pulumi = Chronosphere.Pulumi;

return await Deployment.RunAsync(() => 
{
    var email = new Pulumi.LogscaleAction("email", new()
    {
        Repository = "default",
        Name = "Email on-call",
        EmailAction = new Pulumi.Inputs.LogscaleActionEmailActionArgs
        {
            Recipients = new[]
            {
                "oncall@example.com",
            },
            SubjectTemplate = "Logscale alert: {{alert.name}}",
            BodyTemplate = "{{query.results}}",
        },
    });

    var highErrorRate = new Pulumi.LogscaleAlert("highErrorRate", new()
    {
        Repository = "default",
        Name = "High error rate",
        Description = "More than 500 errors in a 60s window",
        AlertType = "STANDARD",
        Query = "level = ERROR | count(as=numErrors) | numErrors > 500",
        TimeWindow = "60s",
        ThrottleDuration = "60s",
        ThrottleField = "service",
        Tags = new[]
        {
            "errors",
            "platform",
        },
        Disabled = false,
        ActionIds = new[]
        {
            email.Id,
        },
    });

});

    package main

import (
	"github.com/chronosphereio/pulumi-chronosphere/sdk/go/chronosphere"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		email, err := chronosphere.NewLogscaleAction(ctx, "email", &chronosphere.LogscaleActionArgs{
			Repository: pulumi.String("default"),
			Name:       pulumi.String("Email on-call"),
			EmailAction: &chronosphere.LogscaleActionEmailActionArgs{
				Recipients: pulumi.StringArray{
					pulumi.String("oncall@example.com"),
				},
				SubjectTemplate: pulumi.String("Logscale alert: {{alert.name}}"),
				BodyTemplate:    pulumi.String("{{query.results}}"),
			},
		})
		if err != nil {
			return err
		}
		_, err = chronosphere.NewLogscaleAlert(ctx, "highErrorRate", &chronosphere.LogscaleAlertArgs{
			Repository:       pulumi.String("default"),
			Name:             pulumi.String("High error rate"),
			Description:      pulumi.String("More than 500 errors in a 60s window"),
			AlertType:        pulumi.String("STANDARD"),
			Query:            pulumi.String("level = ERROR | count(as=numErrors) | numErrors > 500"),
			TimeWindow:       pulumi.String("60s"),
			ThrottleDuration: pulumi.String("60s"),
			ThrottleField:    pulumi.String("service"),
			Tags: pulumi.StringArray{
				pulumi.String("errors"),
				pulumi.String("platform"),
			},
			Disabled: pulumi.Bool(false),
			ActionIds: pulumi.StringArray{
				email.ID(),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    Example coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.chronosphere.LogscaleAction;
import com.pulumi.chronosphere.LogscaleActionArgs;
import com.pulumi.chronosphere.inputs.LogscaleActionEmailActionArgs;
import com.pulumi.chronosphere.LogscaleAlert;
import com.pulumi.chronosphere.LogscaleAlertArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var email = new LogscaleAction("email", LogscaleActionArgs.builder()        
            .repository("default")
            .name("Email on-call")
            .emailAction(LogscaleActionEmailActionArgs.builder()
                .recipients("oncall@example.com")
                .subjectTemplate("Logscale alert: {{alert.name}}")
                .bodyTemplate("{{query.results}}")
                .build())
            .build());

        var highErrorRate = new LogscaleAlert("highErrorRate", LogscaleAlertArgs.builder()        
            .repository("default")
            .name("High error rate")
            .description("More than 500 errors in a 60s window")
            .alertType("STANDARD")
            .query("level = ERROR | count(as=numErrors) | numErrors > 500")
            .timeWindow("60s")
            .throttleDuration("60s")
            .throttleField("service")
            .tags(            
                "errors",
                "platform")
            .disabled(false)
            .actionIds(email.id())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as chronosphere from "@pulumi-chronosphere/pulumi-chronosphere";

const email = new chronosphere.LogscaleAction("email", {
    repository: "default",
    name: "Email on-call",
    emailAction: {
        recipients: ["oncall@example.com"],
        subjectTemplate: "Logscale alert: {{alert.name}}",
        bodyTemplate: "{{query.results}}",
    },
});
const highErrorRate = new chronosphere.LogscaleAlert("highErrorRate", {
    repository: "default",
    name: "High error rate",
    description: "More than 500 errors in a 60s window",
    alertType: "STANDARD",
    query: "level = ERROR | count(as=numErrors) | numErrors > 500",
    timeWindow: "60s",
    throttleDuration: "60s",
    throttleField: "service",
    tags: [
        "errors",
        "platform",
    ],
    disabled: false,
    actionIds: [email.id],
});

    import pulumi
import pulumi_chronosphere as chronosphere

email = chronosphere.LogscaleAction("email",
    repository="default",
    name="Email on-call",
    email_action=chronosphere.LogscaleActionEmailActionArgs(
        recipients=["oncall@example.com"],
        subject_template="Logscale alert: {{alert.name}}",
        body_template="{{query.results}}",
    ))
high_error_rate = chronosphere.LogscaleAlert("highErrorRate",
    repository="default",
    name="High error rate",
    description="More than 500 errors in a 60s window",
    alert_type="STANDARD",
    query="level = ERROR | count(as=numErrors) | numErrors > 500",
    time_window="60s",
    throttle_duration="60s",
    throttle_field="service",
    tags=[
        "errors",
        "platform",
    ],
    disabled=False,
    action_ids=[email.id])

    resources:
  email:
    type: chronosphere:LogscaleAction
    properties:
      repository: default
      name: Email on-call
      emailAction:
        recipients:
          - oncall@example.com
        subjectTemplate: 'Logscale alert: {{alert.name}}'
        bodyTemplate: '{{query.results}}'
  highErrorRate:
    type: chronosphere:LogscaleAlert
    properties:
      repository: default
      name: High error rate
      description: More than 500 errors in a 60s window
      alertType: STANDARD
      query: level = ERROR | count(as=numErrors) | numErrors > 500
      timeWindow: 60s
      throttleDuration: 60s
      throttleField: service
      tags:
        - errors
        - platform
      disabled: false
      actionIds:
        - ${email.id}

    Create LogscaleAlert Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new LogscaleAlert(name: string, args: LogscaleAlertArgs, opts?: CustomResourceOptions);
    @overload
def LogscaleAlert(resource_name: str,
                  args: LogscaleAlertArgs,
                  opts: Optional[ResourceOptions] = None)

@overload
def LogscaleAlert(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  name: Optional[str] = None,
                  alert_type: Optional[str] = None,
                  run_as_user: Optional[str] = None,
                  repository: Optional[str] = None,
                  disabled: Optional[bool] = None,
                  query: Optional[str] = None,
                  action_ids: Optional[Sequence[str]] = None,
                  description: Optional[str] = None,
                  slug: Optional[str] = None,
                  tags: Optional[Sequence[str]] = None,
                  throttle_duration: Optional[str] = None,
                  throttle_field: Optional[str] = None,
                  time_window: Optional[str] = None)
    func NewLogscaleAlert(ctx *Context, name string, args LogscaleAlertArgs, opts ...ResourceOption) (*LogscaleAlert, error)
    public LogscaleAlert(string name, LogscaleAlertArgs args, CustomResourceOptions? opts = null)
    public LogscaleAlert(String name, LogscaleAlertArgs args)
public LogscaleAlert(String name, LogscaleAlertArgs args, CustomResourceOptions options)

    type: chronosphere:LogscaleAlert
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "chronosphere_logscalealert" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args LogscaleAlertArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args LogscaleAlertArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args LogscaleAlertArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args LogscaleAlertArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args LogscaleAlertArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var logscaleAlertResource = new Pulumi.LogscaleAlert("logscaleAlertResource", new()
{
    Name = "string",
    AlertType = "string",
    RunAsUser = "string",
    Repository = "string",
    Disabled = false,
    Query = "string",
    ActionIds = new[]
    {
        "string",
    },
    Description = "string",
    Slug = "string",
    Tags = new[]
    {
        "string",
    },
    ThrottleDuration = "string",
    ThrottleField = "string",
    TimeWindow = "string",
});

    example, err := chronosphere.NewLogscaleAlert(ctx, "logscaleAlertResource", &chronosphere.LogscaleAlertArgs{
	Name:       pulumi.String("string"),
	AlertType:  pulumi.String("string"),
	RunAsUser:  pulumi.String("string"),
	Repository: pulumi.String("string"),
	Disabled:   pulumi.Bool(false),
	Query:      pulumi.String("string"),
	ActionIds: pulumi.StringArray{
		pulumi.String("string"),
	},
	Description: pulumi.String("string"),
	Slug:        pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	ThrottleDuration: pulumi.String("string"),
	ThrottleField:    pulumi.String("string"),
	TimeWindow:       pulumi.String("string"),
})

    resource "chronosphere_logscalealert" "logscaleAlertResource" {
  name              = "string"
  alert_type        = "string"
  run_as_user       = "string"
  repository        = "string"
  disabled          = false
  query             = "string"
  action_ids        = ["string"]
  description       = "string"
  slug              = "string"
  tags              = ["string"]
  throttle_duration = "string"
  throttle_field    = "string"
  time_window       = "string"
}

    var logscaleAlertResource = new LogscaleAlert("logscaleAlertResource", LogscaleAlertArgs.builder()
    .name("string")
    .alertType("string")
    .runAsUser("string")
    .repository("string")
    .disabled(false)
    .query("string")
    .actionIds("string")
    .description("string")
    .slug("string")
    .tags("string")
    .throttleDuration("string")
    .throttleField("string")
    .timeWindow("string")
    .build());

    logscale_alert_resource = chronosphere.LogscaleAlert("logscaleAlertResource",
    name="string",
    alert_type="string",
    run_as_user="string",
    repository="string",
    disabled=False,
    query="string",
    action_ids=["string"],
    description="string",
    slug="string",
    tags=["string"],
    throttle_duration="string",
    throttle_field="string",
    time_window="string")

    const logscaleAlertResource = new chronosphere.LogscaleAlert("logscaleAlertResource", {
    name: "string",
    alertType: "string",
    runAsUser: "string",
    repository: "string",
    disabled: false,
    query: "string",
    actionIds: ["string"],
    description: "string",
    slug: "string",
    tags: ["string"],
    throttleDuration: "string",
    throttleField: "string",
    timeWindow: "string",
});

    type: chronosphere:LogscaleAlert
properties:
    actionIds:
        - string
    alertType: string
    description: string
    disabled: false
    name: string
    query: string
    repository: string
    runAsUser: string
    slug: string
    tags:
        - string
    throttleDuration: string
    throttleField: string
    timeWindow: string

    LogscaleAlert Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The LogscaleAlert resource accepts the following input properties:

    AlertType string
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    Name string
    Display name of the LogScale alert.
    Repository string
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    RunAsUser string
    Email of the user that the alert runs on behalf of
    ActionIds List<string>
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    Description string
    Human-readable description of the alert.
    Disabled bool
    If true, the alert will not evaluate or trigger actions.
    Query string
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    Slug string
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    Tags List<string>
    Tags attached to the alert for organization and filtering.
    ThrottleDuration string
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    ThrottleField string
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    TimeWindow string
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    AlertType string
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    Name string
    Display name of the LogScale alert.
    Repository string
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    RunAsUser string
    Email of the user that the alert runs on behalf of
    ActionIds []string
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    Description string
    Human-readable description of the alert.
    Disabled bool
    If true, the alert will not evaluate or trigger actions.
    Query string
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    Slug string
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    Tags []string
    Tags attached to the alert for organization and filtering.
    ThrottleDuration string
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    ThrottleField string
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    TimeWindow string
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    alert_type string
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    name string
    Display name of the LogScale alert.
    repository string
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    run_as_user string
    Email of the user that the alert runs on behalf of
    action_ids list(string)
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    description string
    Human-readable description of the alert.
    disabled bool
    If true, the alert will not evaluate or trigger actions.
    query string
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    slug string
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags list(string)
    Tags attached to the alert for organization and filtering.
    throttle_duration string
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttle_field string
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    time_window string
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    alertType String
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    name String
    Display name of the LogScale alert.
    repository String
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    runAsUser String
    Email of the user that the alert runs on behalf of
    actionIds List<String>
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    description String
    Human-readable description of the alert.
    disabled Boolean
    If true, the alert will not evaluate or trigger actions.
    query String
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    slug String
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags List<String>
    Tags attached to the alert for organization and filtering.
    throttleDuration String
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttleField String
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    timeWindow String
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    alertType string
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    name string
    Display name of the LogScale alert.
    repository string
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    runAsUser string
    Email of the user that the alert runs on behalf of
    actionIds string[]
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    description string
    Human-readable description of the alert.
    disabled boolean
    If true, the alert will not evaluate or trigger actions.
    query string
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    slug string
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags string[]
    Tags attached to the alert for organization and filtering.
    throttleDuration string
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttleField string
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    timeWindow string
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    alert_type str
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    name str
    Display name of the LogScale alert.
    repository str
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    run_as_user str
    Email of the user that the alert runs on behalf of
    action_ids Sequence[str]
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    description str
    Human-readable description of the alert.
    disabled bool
    If true, the alert will not evaluate or trigger actions.
    query str
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    slug str
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags Sequence[str]
    Tags attached to the alert for organization and filtering.
    throttle_duration str
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttle_field str
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    time_window str
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    alertType String
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    name String
    Display name of the LogScale alert.
    repository String
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    runAsUser String
    Email of the user that the alert runs on behalf of
    actionIds List<String>
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    description String
    Human-readable description of the alert.
    disabled Boolean
    If true, the alert will not evaluate or trigger actions.
    query String
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    slug String
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags List<String>
    Tags attached to the alert for organization and filtering.
    throttleDuration String
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttleField String
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    timeWindow String
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the LogscaleAlert resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing LogscaleAlert Resource

    Get an existing LogscaleAlert resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: LogscaleAlertState, opts?: CustomResourceOptions): LogscaleAlert
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action_ids: Optional[Sequence[str]] = None,
        alert_type: Optional[str] = None,
        description: Optional[str] = None,
        disabled: Optional[bool] = None,
        name: Optional[str] = None,
        query: Optional[str] = None,
        repository: Optional[str] = None,
        run_as_user: Optional[str] = None,
        slug: Optional[str] = None,
        tags: Optional[Sequence[str]] = None,
        throttle_duration: Optional[str] = None,
        throttle_field: Optional[str] = None,
        time_window: Optional[str] = None) -> LogscaleAlert
    func GetLogscaleAlert(ctx *Context, name string, id IDInput, state *LogscaleAlertState, opts ...ResourceOption) (*LogscaleAlert, error)
    public static LogscaleAlert Get(string name, Input<string> id, LogscaleAlertState? state, CustomResourceOptions? opts = null)
    public static LogscaleAlert get(String name, Output<String> id, LogscaleAlertState state, CustomResourceOptions options)
    resources:  _:    type: chronosphere:LogscaleAlert    get:      id: ${id}
    import {
  to = chronosphere_logscalealert.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ActionIds List<string>
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    AlertType string
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    Description string
    Human-readable description of the alert.
    Disabled bool
    If true, the alert will not evaluate or trigger actions.
    Name string
    Display name of the LogScale alert.
    Query string
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    Repository string
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    RunAsUser string
    Email of the user that the alert runs on behalf of
    Slug string
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    Tags List<string>
    Tags attached to the alert for organization and filtering.
    ThrottleDuration string
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    ThrottleField string
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    TimeWindow string
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    ActionIds []string
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    AlertType string
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    Description string
    Human-readable description of the alert.
    Disabled bool
    If true, the alert will not evaluate or trigger actions.
    Name string
    Display name of the LogScale alert.
    Query string
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    Repository string
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    RunAsUser string
    Email of the user that the alert runs on behalf of
    Slug string
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    Tags []string
    Tags attached to the alert for organization and filtering.
    ThrottleDuration string
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    ThrottleField string
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    TimeWindow string
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    action_ids list(string)
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    alert_type string
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    description string
    Human-readable description of the alert.
    disabled bool
    If true, the alert will not evaluate or trigger actions.
    name string
    Display name of the LogScale alert.
    query string
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    repository string
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    run_as_user string
    Email of the user that the alert runs on behalf of
    slug string
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags list(string)
    Tags attached to the alert for organization and filtering.
    throttle_duration string
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttle_field string
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    time_window string
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    actionIds List<String>
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    alertType String
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    description String
    Human-readable description of the alert.
    disabled Boolean
    If true, the alert will not evaluate or trigger actions.
    name String
    Display name of the LogScale alert.
    query String
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    repository String
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    runAsUser String
    Email of the user that the alert runs on behalf of
    slug String
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags List<String>
    Tags attached to the alert for organization and filtering.
    throttleDuration String
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttleField String
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    timeWindow String
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    actionIds string[]
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    alertType string
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    description string
    Human-readable description of the alert.
    disabled boolean
    If true, the alert will not evaluate or trigger actions.
    name string
    Display name of the LogScale alert.
    query string
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    repository string
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    runAsUser string
    Email of the user that the alert runs on behalf of
    slug string
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags string[]
    Tags attached to the alert for organization and filtering.
    throttleDuration string
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttleField string
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    timeWindow string
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    action_ids Sequence[str]
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    alert_type str
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    description str
    Human-readable description of the alert.
    disabled bool
    If true, the alert will not evaluate or trigger actions.
    name str
    Display name of the LogScale alert.
    query str
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    repository str
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    run_as_user str
    Email of the user that the alert runs on behalf of
    slug str
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags Sequence[str]
    Tags attached to the alert for organization and filtering.
    throttle_duration str
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttle_field str
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    time_window str
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.
    actionIds List<String>
    Slugs of LogScale actions to invoke when the alert triggers. The alert does not fire if this list is empty.
    alertType String
    Type of LogScale alert. STANDARD runs the query on a schedule over a time window; FILTER evaluates the query against each incoming event.
    description String
    Human-readable description of the alert.
    disabled Boolean
    If true, the alert will not evaluate or trigger actions.
    name String
    Display name of the LogScale alert.
    query String
    LogScale query that the alert evaluates. Example: level = ERROR | severity > 3 | count(as=numErrors) | numErrors > 500.
    repository String
    Name of the LogScale repository the alert belongs to. Immutable after creation.
    runAsUser String
    Email of the user that the alert runs on behalf of
    slug String
    Stable identifier for the LogScale alert. Generated from name if omitted. Immutable after creation.
    tags List<String>
    Tags attached to the alert for organization and filtering.
    throttleDuration String
    Minimum interval between consecutive triggers of the alert. Required for STANDARD alerts, optional for FILTER alerts.
    throttleField String
    Optional field whose value is used to scope throttling, so the alert is throttled per distinct value of this field rather than globally.
    timeWindow String
    Lookback window for the alert query. Required for STANDARD alerts, ignored for FILTER alerts.

    Package Details

    Repository
    chronosphere chronosphereio/pulumi-chronosphere
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the chronosphere Terraform Provider.
    Viewing docs for Chronosphere v0.9.16
    published on Friday, Jun 5, 2026 by Chronosphere
    Schema (JSON)
    chronosphereio/pulumi-chronosphere

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial