Is it possible to trigger an alarm only when the count of  a same kind of trap event excceed a treshold for a specific period of time?

For exemple we receive an event each time a IPS sugnature is matched for a firewall witch is not necessary relevant.