Hi Vikram, you can suppress alert using the EPL "output first"
construct, that allow you to generate only the first alert for the
"group by" meta and then suppress all successive alerts generated by the
rule for a arbitrary time frame.Below you can f...
