How to trigger different actions based on the number of results in alert ?

[syamkrishnachuk]

Hi,

I want to trigger an email if the number of results is greater that 25 and trigger a PagerDuty only when the number of results is greater that 50.

I can achieve this by setting up as two different alerts.
resultHowever, I would like to know if there is a better/optimized way to achieve this.

Thanks!

[woodcock]

The best way to do this is have various searches append their results into a lookup file and then have 2 more scheduled searches peek into that lookup file, each with its own criteria: one that sends emails, the other that sends pages.