Streams, alert when more than

Good day,

I am trying to get a stream to work by counting if a word in a message appears more than x amount of times per hour, from a single host.

Is there anyone that can assist with a sample rule?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.