Trying to find a way to limit of email alerts

Solarwinds LEM - Make a rule fire once - YouTube

Yes, that's kind of a way I was thinking of doing it, however so far I have not been successful.  I created a rule that watches if the file monitoring rule fires 10 times in 30 seconds, and if it triggers it adds a specific value to a user defined group.  Then I modified my file monitoring rule to fire if that specific value is not in the user defined group.  The threshold rule works well and sets the flag correctly in the user defined group, but that doesn't make the file monitoring rule to stop firing.  The only way I can explain this is if this sort of condition in a rule doesn't work:

<Text constant> NOT IN <user defined groupe>

So still searching.

Thanks.

I was able to use Correlation Time in a satisfactory manner for my issue, but I will keep in mind the use of user-defined groups to stop a rule from triggering.

The problem with that solution though was that the condition to stop the rule from being triggered doesn't exist fast enough to prevent being spammed with alerts.  For example, in the case where I copy a bunch of files to a monitored folder at once, all those events will trigger the rule before the value is added to the user-defined group to prevent further alerts, so I still gets spammed.