I think this is going to vary a lot depending on your environment.
In alerts for splunk admins https://splunkbase.splunk.com/app/3796/ I have high in the description for anything I considered very important and a low chance of false alarm.
The more recent alerts and reports are used to find issues and tend to summarize more where the older alerts are very specific
