Hi, I created a custom event “LoginAttempt” with custom attributes “loginEmail”, “loginSucceeded”. I would like to create an Alert that is triggered for each user that try to login 3 times in a 5 minutes window.
I tried to use this NRQL:
SELECT count(*) FROM LoginAttempt FACET loginEmail WHERE appName = 'my-app' AND loginSucceeded is FALSE
The critical threshold is reached but it never open incident? Can someone help me with this use case please?