Which TWO statements correctly distinguish metric alerts from log search alerts?
- A Metric alerts evaluate pre-aggregated data with lower latency and cost (correct answer)
- B Log search alerts run a KQL query on a schedule and are more expressive (correct answer)
- C Log search alerts are always cheaper
- D Metric alerts cannot use dimensions
- E Log search alerts evaluate in real time
Shortcut: Platform metrics are pre-aggregated, so metric alerts fire quickly and cheaply and do support dimensions. Log search alerts trade latency and query cost for the full expressiveness of KQL across arbitrary tables.