throttle

throttle

verb

Reduce the frequency at which an alert triggers.

An alert can trigger frequently based on similar results that the search returns. The schedule to run an alert can also cause the alert to trigger frequently. To reduce the frequency of the alert firing, you can configure a time period in which to suppress results or specify field values that the search returns.

For more information

In the Alerting Manual:

• Use throttling to limit alerts
• Throttling scheduled and real-time searches