I'm attempting to create a rule that will send an email alert when a user deletes a large amount of file within a small window of time. What do I need to add to my rule so that it only triggers when the deletes are done by the same user? Right now i could have multiple users delete multiple files in the time frame and it would trigger the alert.