I've only used the default reports so far, but wanted to generate an alert to email me when an event occurs, so I tried to create one but cannot see how to do it.

The logon failure reports page often shows some users with a large number of login failures - typically using expired stored passwords.

I'd like a report of any user with e.g. 1000 logon failures in an hour and have it emailed to me.

How can I do this, or any other report/alert that users counts of events?

thanks