1 Reply Latest reply on Sep 1, 2016 9:58 AM by curtisi

    Can we write such rule?

    kdevmu

      Alert if there are Five failed logon attempts are tried from different usernames from the same IP within 15 minutes and after that if there is a successful login occurs from the same IP in next one hour?