# Elastic SIEM - Detection Rules - Multiple Thresholds in a Rule
**URL:** https://discuss.elastic.co/t/elastic-siem-detection-rules-multiple-thresholds-in-a-rule/263411
**Category:** Elastic Security
**Created:** [February 5, 2021, 3:11pm UTC](https://discuss.elastic.co/t/elastic-siem-detection-rules-multiple-thresholds-in-a-rule/263411 "2021-02-05T15:11:00Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@tushar.bansal](https://discuss.elastic.co/u/tushar.bansal)
#### Post date: [February 5, 2021, 3:11pm UTC](https://discuss.elastic.co/t/elastic-siem-detection-rules-multiple-thresholds-in-a-rule/263411/1 "2021-02-05T15:11:01Z")
Is there a way to apply multiple Thresholds in a single rule?
example:
More than 10 Identical event.actions on more than 10 destination.hostnames in a span of 10 minutes
Threshold 1: Results aggregated by event.action \>=10
AND
Threshold 2: Results aggregated by destination.hostname \>=10
AND
Threshold 3: Results aggregated by @timestamp \<= 10 minutes
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 5, 2021, 3:11pm UTC](https://discuss.elastic.co/t/elastic-siem-detection-rules-multiple-thresholds-in-a-rule/263411/2 "2021-03-05T15:11:59Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.