Q1 when i create an alert policy like this...
alert will trigger after 60 mins or when threshold meet the criteria (55 mins)?
10 activities (threshold)
60 mins (window)
file is copied every 5 minutes.
Q2 is it counting like this?
0 mins 1
5 mins 2
10 mins 3
..
so it will be 55 mins to hit 10 activities
or it start counting like this?
5 mins 1
10 mins 2