Splunk alerts are actions that get triggered when a specific criterion is met which is defined by the user.  As a result of action – generally, there is mail, script, or notification is triggered as per added action. Splunk Alerts are set up to have continuous monitoring about the applied condition/ particular criteria is met and perform the action as per configured.  There are mainly two types of Splunk Alert:  Scheduled Alerts - These alerts search conditions at the scheduled time and share the result. We can choose the schedule according to different timing options available or can use a cron expression to schedule the alert.   Real-Time Alerts - In this case, Splunk Alert searches the string continuously and triggers the action once the search criterion is met.   For setting the Splunk Alert, we can trigger the query and then click on Save as --> Alert on the right top corner. Later we can add other details about Alert action, run window, and schedule.