Failed logins

[ha100]

I know this has been asked before, but how do I make a trigger in Zabbix 6 to register 5 failed login attempts in five minutes. I don't want every failed login attempt. I know it cannot be hard but cannot figure it out.

[cyber]

count(/host/key,5m)>5

https://www.zabbix.com/documentation/6.0/en/manual/appendix/functions/history

Examples:
=> count(/host/key,10m) → number of values for the last 10 minutes until now

[ha100]

Thanks. It's working. Zabbix is very good.