Skip to main content
POST /api/v1/alerts/rules
A rule’s kind is scheduled, realtime, or anomaly. See Alerting. 
{
  "name": "High error rate",
  "kind": "scheduled",
  "stream": "app",
  "statement": "SELECT count(*) AS c FROM app WHERE level = 'error'",
  "condition": { "op": ">", "value": 100 },
  "interval_secs": 60,
  "escalation_id": "esc_2abc..."
}