Create and alerte where source is a network?

Create and alerte where source is a network?

I am trying to setup an alert based on a certain number of events in a specific time when the source is from any of four networks. When defining the criteria can I use the CIDR (Ex: 123.123.123.0/24) for the source? Or, do I have to create an "anomaly alert" for each network?

                New to ADSelfService Plus?