Skip to main content
Panther Knowledge Base

Do alerts that don't meet thresholds fire eventually?

  1. Last updated
  2. Save as PDF

QUESTION

If there is a rule with a threshold 10 events, but only 2 events trigger for this alert, does the alert never fire? Or does it fire eventually with just 2 events?

ANSWER

No, the alert would never fire. If your threshold is set to 10, that means it will only trigger after the 10th failed login. However, you can tune the threshold number for a rule up or down if desired.

Read more about rule thresholds in our Rules and Scheduled Rules documentation.