Any suggestion to create multiple stages real-time alert use-case(s) based on the flow chart image hyperlink follow?
https://www.dropbox.com/s/esfajz47o48i8u3/splunk_use-case_requirements.png?dl=0