We get the same event from 100+ computers within a very short time (1
second). 

Is there a way to filter out all but one or a few of these events so the
event window isn't flooded with all of them? 

I have seen the ruleset editor described in a manual. Is this capable of
doing what I want?

-- 
Robin
email: robin.james AT thalesatm DOT com