SOC: Repeated Errors
soc_repeated_errorsDetects error messages appearing more than five times in a specified time window to identify potential probes, loops, or persistent incidents. Answers queries about recurring failures.
Instructions
SOC view of error messages that appear more than 5 times — potential probes, loops, or persistent incidents. Use for 'what keeps repeating' or 'show recurring failures'.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| since | No | Time window e.g. '15m ago', '1h ago', '2d ago'. |