How to setup threshold for brute force accelerated data model splunk queries

[sudhirsks]

Searching for last one brute force login attempt failure from sources and host  getting multiple results,so need to setup threshold to tune the traffic

[richgalloway]

Please describe your use case more. What exactly are you looking for? Have you looked at the Brute Force Login Attempt examples in the Splunk Security Essentials app?