Severity of an incident set by number of matches by policy not by rule