I have setup WAF security event notifications and testing button triggered the alerts ,however I have seen many blocked events for last few weeks but none of them triggered any alert emails
Thanks for the update, yes I did follow this and setup notifications but , I feel it’s important to customize the spike threshold, If I see this from false positive detections point of view , we may missed out valuable customer/client access with one event blocked.