I want to build an ESA alert that will trigger on any single event where multiple instances of the error meta-key are present in the event metadata.
As an example,
I've already tried numerous approaches but nothing seems to work. Also, I found it interesting to note that the error meta-key is of type string and not a string array.
Any suggestions would be welcomed and appreciated. Thanks in advance.