Why cant we create if an logsource is not reporting as an alert ?

[rahul7514]

Hi All

We have done creating alerts using GCP with email notification .

But still can some one tell me the reasons why i cannot create an Yara L rule for host (asset.namespace) not reporting alert ? 

I have been asked this question many time and i have been just telling google suggests to use GCP monitoring based alerts for this. 

@jstoner / @David-French