...
Time range: it starts with the eventdate registered in the alert's extraData (adapted to your timezone) and concludes after the period specified in the alert definition settings.
Events shown: all the events (or no event at all) that triggered the alert due to not reaching the threshold established in the alert definition settings.
Inactivity-type alerts
Time range: it starts 10 minutes before the beginning of the inactivity period and concludes 1 minute after the end. These extra minutes enable the visualization of previous events for reference and exclude false positives by considering the triggering delay. The beginning of the inactivity period corresponds to the eventdate registered in the triggered alert’s extraData (adapted to your timezone), while its end corresponds to the expiration of the period specified in the alert definition settings.
Events shown: all events occurring during the current period regardless of the key, providing reference for the series of values that triggered the alert due to a deficiency of one value compared to the previous period.
Rolling-type alerts
Time range: it starts with the eventdate registered in the alert extraData (adapted to your timezone) and concludes after the backperiod specified in the alert settings.
Events shown: the event group that triggered the alert.
...