I have been tasked with setting up a new service for a database lookup failure. The email comes from our CIC server. When there is a lookup failure the server will send an email every two minutes until the error clears itself, which could be a few minutes, or if the issue is manually taken care of. Is there a way to trigger a notification and incident after a predetermined amount of emails. For example ignore the first 3 emails and then send notification on the 4th. The only option or way I can think of is using email filters but depends on if the body of the email can be changed on one of the emails. Have to talk to the person who setup the email alerts to see if he can do that.
Any help or suggestions are greatly appreciated.