account matching in IDM rule

[Yassine Hrimech]

Hello,

i use IDM in policy to match a specific document and i want to trigger my policy when the messages include atleast five times the same document. unlike in EDM rule, in IDM rule i can't find the account matchs .
Please, there is any solutions/way to hundle this.

Bests

[Yassine Hrimech]

@DLP team,@DLP Engineering, @DLP Support​​​​

[DLP Freak]

the best i could come up with is to set the rule to count each match then use the console or SEIM to show only incidents with 5 or more matches.