$ 0 0 Here's my best guess at a basic rule to do what you need. This sends one of my custom templates, so if you import the rule that may be different. Obviously you'd want to change the IP being correlated from my dummy example.