Ok, last post for a while (hopefully).

When I receive an email alert, it always starts with:
"One or more alerts have fired, the first one for this batch at [time/date]."

If I have a threshold set to '3' does 'first one' refer to the time of the first occurance of the issue?