Splunk fire alert if there is same result 10 times in last 1 hour

[SS1]

Search:

index="test" "This is a error with IP Address *.*.*.*"

we have the above search query where the IP address keeps changing, so we want to fire an alert if there are 10 events for the same IP address in the last 1 hour.

[renjith_nair]

Extract the IP address ,count by IP Address, run the search for last 60 mins and raise an alert if count > 10.

for .e.g

index="test" "This is an error with IP Address ..." earliest=-60m
|rex "IP Address\s+(?<IP>\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3})"
|stats count by IP|where count >10