Hi, I have rule created in ESA to fire on specific criteria in Web logs.
I have added the GeoIP as an enrichmnet (lookup based on ip_src. All
this works just fine. As part of the rule I want to fire off an e-mail
alert, but I only want to include one...