# Single behavior generates several alerts **URL:** https://discuss.elastic.co/t/single-behavior-generates-several-alerts/283943 **Category:** SIEM **Created:** [September 11, 2021, 2:43pm UTC](https://discuss.elastic.co/t/single-behavior-generates-several-alerts/283943 "2021-09-11T14:43:13Z") **Posts on this page:** 1 **Showing post:** 2
### Author: ![n2x4](https://avatars.discourse-cdn.com/v4/letter/n/3e96dc/32.png) [@n2x4](https://discuss.elastic.co/u/n2x4) #### Post date: [September 11, 2021, 4:32pm UTC](https://discuss.elastic.co/t/single-behavior-generates-several-alerts/283943/2 "2021-09-11T16:32:55Z")
The only thing you could do is adjust your threshold, lookback, and interval. If you set your threshold to 5 it will only generate an alert once 5 matching events are generated in the amount of time you're looking back. It's not great, but that's all there is right now. Other SIEM have more advanced options, there was a recent post that discussed it: [Reduce duplicate signals/ alerts](https://discuss.elastic.co/t/reduce-duplicate-signals-alerts/282768) Unfortunately that post didn't get any input. --- _[View the full topic](https://discuss.elastic.co/t/single-behavior-generates-several-alerts/283943)._