You need to send a POST request with the following parameters in the body: name <ANY NAME> alert_comparator greater than alert_threshold 0 search <YOUR SEARCH IN SPL> alert_type number of events is_scheduled 1 cron_schedule <YOUR CRON SCHEDULE> Example: */10 * * * *
... View more