Sorry if I'm asking a very simple question or one that has already been answered, but I have been unable to find anything about how to do this. We are interested in creating an alert that monitors for failed logins for a specific group of accounts, but only want to be alerted if the number of failures is above a certain threshold. Is this possible? I have a report that shows all of their failed logons, but we would be getting alerts constantly for every failed logon. We're only concerned if they are getting several hundred an hour.