how should I build the query so it will count only 4xx error

Question

how should I build the query so it will count only 4xx errors in last 5 mins instead of accumulating them forever