This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.
Can we write such rule?
FormerMember
Alert if there are Five failed logon attempts are tried from different usernames from the same IP within 15 minutes and after that if there is a successful login occurs from the same IP in next one hour?
