Which alert type evaluates a KQL query on a schedule and fires when results cross a threshold?
- A Metric alert
- B Log search alert (correct answer)
- C Activity log alert
- D Smart detection
Shortcut: Log search alerts run a saved KQL query at an interval and evaluate the result count or a numeric column. Metric alerts operate on pre-aggregated platform metrics with lower latency.