Steps to audit the number of times or number of computers that are triggering Custom Rules.
USE das;
SELECT
E.Rule_Name AS 'Rule Name',
count( E.Event_Id ) as 'Times Triggered',
count( distinct E.Computer_Id ) as 'Total Computers Triggered'
FROM
bit9_public.ExEvents E
WHERE
E.Rule_Name is not null and
E.Updater_Name is null and
E.Indicator_Name is null
GROUP BY
E.Rule_Name
ORDER BY 2 DESC;