Hi, I'm trying to combine a number of our failed login rules into one
rule as we are nearing our detection rule capacity however I appear to
be getting the following error regardless of what I try and
change.semantic analysis: match variable user is ...