The thread is even older now, but I also found you need to specify ` 'alert.suppress' : 0 ` when posting to ` /servicesNS/{owner}/{app}/saved/searches/ ` to make sure it's an alert and not a report. In total, I specified at least the below parameters to create an alert {
'is_scheduled': 1,
'cron_schedule': '09-59/10 * * * *',
'alert_comparator': 'greater than',
'alert_threshold': 5,
'alert_type': 'number of events',
'alert.suppress': 0,
}
... View more