I want to write a complex rule where i need to trigger a rule when any network ip hits to an application over a 10 minutes window. i have challenges where ip\'s will be vary