Suppress Continuous Alerts

[Issac08]

Hi All,

 Is there anyway to stop continuous flow of alerts for failed logins ,if any service account is locked some task or scripts may continuously try to login and it will generate alerts . Whether it can be automatically stop after some 3 to 6 times and update the next hour again with 3 alerts .

[Anonymous]

Hi, You can always suppress your alerts while creating it on ESA. Use 'group by' and 'occurs within'. And also you can suppress the alerts by any statements as well.  

Refer here for more details: Alerting: Rule Builder Tab