How are you setting the alerts? Are you using anomaly detection? If so, what kind?