Name and query

The sections that make up an alert rule, and why a descriptive rule name is the first thing a responder sees.

The parts that make up a query, why this journey uses Builder mode over Code, and why you always preview.

How an operator and a threshold define when an alert moves from normal toward firing.