Can we create 3 event rules for same source for scenario where a
-Minor alert should be created for 2 events in 10mins
-Major Alert should be created for 3 events in 15mins.
-Critical alert should be created for 4 events
When I created both of them even though order is different, still only one event rule is getting applied.
Apply Additional Matching rule can't work in this scenario as it makes Threshold read only.
