Hi, For the ESA Rule is there an option not to create additional
notifications for certain time post first notification. For example lets
take an alert logic where the requirement is to alert multiple failed
login attempted by User A for 5 times in 2...
Hi Haitham, use case 1 :https://community.rsa.com/docs/DOC-53333 (check
it would be of any help in NW)use case 2: Monitor for the event id
"4728"use case 3: Monitor for the event id "4625" for same user name
(set the threshold as per company's policy...
