Make the time window in which the duo_authfail alert looks for events several times longer than the duo cron job period
Make the time window in which the duo_authfail alert looks for events several times longer than the duo cron job period

gdestuynder/MozDef,ameihm0912/MozDef,jeffbryner/MozDef,gdestuynder/MozDef,gdestuynder/MozDef,mozilla/MozDef,mpurzynski/MozDef,mpurzynski/MozDef,Phrozyn/MozDef,Phrozyn/MozDef,mozilla/MozDef,mozilla/MozDef,ameihm0912/MozDef,mpurzynski/MozDef,jeffbryner/MozDef,jeffbryner/MozDef,ameihm0912/MozDef,mozilla/MozDef,gdestuynder/MozDef,jeffbryner/MozDef,mpurzynski/MozDef,Phrozyn/MozDef,Phrozyn/MozDef,ameihm0912/MozDef