AnsweredAssumed Answered

Alerting on meta instances

Question asked by Pavel Iusco on Jul 25, 2019
Latest reply on Jul 30, 2019 by Pavel Iusco

I have a set of events, each with multiple instances of the same meta key "action" with three unique and a number of same values. Is there a way to alert when one such event has a number of same values greater than x?

 

Example, in a FTP session action key contains all the actions in the ftp session and i want to alert if PWD is given twice.

Outcomes