# Alert monitor - Keep getting 1 hit every 5 minutes.. want it to change to 100 hits every five minutes **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-alerting\ **Created:** [August 18, 2020, 6:08am UTC](https://discuss.elastic.co/t/alert-monitor-keep-getting-1-hit-every-5-minutes-want-it-to-change-to-100-hits-every-five-minutes/245350 "2020-08-18T06:08:15Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![jamesyone](https://avatars.discourse-cdn.com/v4/letter/j/67e7ee/32.png) [@jamesyone](https://discuss.elastic.co/u/jamesyone)\ **Post date:** [August 18, 2020, 6:08am UTC](https://discuss.elastic.co/t/alert-monitor-keep-getting-1-hit-every-5-minutes-want-it-to-change-to-100-hits-every-five-minutes/245350/1 "2020-08-18T06:08:15Z")
Hi, I want to be able to receive alerts for security WAF blocks for 100 hits every 5 minutes instead of 1 hit every five minutes.. ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/4/04541ff4b872a937929cb9d3aacc8673831a9024.png) Is it possible on kibana? ---
**Author:** ![Mike\_Paquette](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mike_paquette/32/119011_2.png) [@Mike\_Paquette](https://discuss.elastic.co/u/Mike_Paquette)\ **Post date:** [August 20, 2020, 11:16am UTC](https://discuss.elastic.co/t/alert-monitor-keep-getting-1-hit-every-5-minutes-want-it-to-change-to-100-hits-every-five-minutes/245350/2 "2020-08-20T11:16:46Z")
Hi James, I'm not an expert in these types of queries, so I can't provide you with direct help. Since you appear to be using the Elastic Stack for alerting on security-related logs, I wonder if you've checked out the SIEM App (now called the Security App) in Kibana? It's included in the default distribution of the Elastic Stack from Elastic, and it has a built-in detection rule type called the Threshold rule that should be able to provide just what you're looking for. ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/f/df2ba5e9b3ce4ee53d5ab162b8db4efff4251d75.png) Oh, and a significant set of features in the SIEM/Security App are free for our end-users to download and use for as long as they want, on as much data as they want. Or they can try it free in our Elastic Cloud Elasticsearch Service for 14-days at [https://www.elastic.co/cloud/](https://www.elastic.co/cloud/) . The SIEM/Security app does require that your data is normalized to Elastic Common Schema (ECS) format, (See [https://www.elastic.co/guide/en/ecs/current/index.html](https://www.elastic.co/guide/en/ecs/current/index.html)) but depending on your data source, there may be an ECS-compatible module for that already. We have a large selection of integrations that you can view here [https://www.elastic.co/integrations](https://www.elastic.co/integrations) . If you have a data source that is not directly supported, you can create a new one. Here's a blog that shows how that is done. [https://www.elastic.co/blog/getting-started-adding-new-security-data-source-in-elastic-siem](https://www.elastic.co/blog/getting-started-adding-new-security-data-source-in-elastic-siem) You can check out the Security product web page here: [https://www.elastic.co/security](https://www.elastic.co/security) Or check out the product documentation here: [https://www.elastic.co/guide/en/security/current/index.html](https://www.elastic.co/guide/en/security/current/index.html) Good luck with your alerting! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 17, 2020, 11:16am UTC](https://discuss.elastic.co/t/alert-monitor-keep-getting-1-hit-every-5-minutes-want-it-to-change-to-100-hits-every-five-minutes/245350/3 "2020-09-17T11:16:48Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.