Multiple Workstations login correlation rule

Discussion created by areeb on Apr 2, 2012
Hello I want a correlation role fires when some on try to login to a server from multiple workstation in 10 minutes failed or success login i don not know how to count logins to the same user to the same server from multiple locations (workstations)