You can use the Alert Management module to set alert rules and view alert events triggered by the rules.
Prerequisites
The collection of cloud product logs is enabled. These logs include important logs, detailed logs, job operational logs, and audit logs. For more information, see Enable the collection of cloud product logs.
Entry point
Log on to the Simple Log Service console. On the Audit & Security tab of the Log Application section , click Log Audit Service (New Version).

Click the project that you want to manage. Then choose Alert Management > Alert Rules or Alert Management > Event Center from the left-side navigation pane.

After associating the project, click Alert Rules or Event Center for the first time, and click Create Now. Log Audit service creates the security-event Eventstore by default. Eventstore is used to collect, store, and query events.

Add alert rules
To add alert rules, select on the Alert Rules page. For the description of the parameters, see Create an alert rule.
View alert events
On the Event Center page, you can view all the events that trigger alerts according to the alert rules. For more information, see Eventstore.