Alerts represent a red flag, so log all of them as "alert" events