how should I build the query so it will count only...
# support
d
how should I build the query so it will count only 4xx errors in last 5 mins instead of accumulating them forever?