action that is performed when the alert rule becomes active, and when an alert condition is resolved.