CB Protection: How to reduce the amount of back to back alerts for the same event

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

This article discusses how to cut back on the amount of alerts sent from the same type of event.  

Environment

CB Protection Server: All Supported Versions

Resolution

In the Alert settings, increasing the 'Threshold' value would allow for the event to occur X times before the alert is triggered.
For example, if the threshold is 1, every time the event occurs the alert is triggered.  If the threshold is set to 10, it would take 10 instances of the event occurring to trigger the alert.