Event Handler for 'Top Sources'

[FortiN00b]

I'm looking for a way to create an event handler that detects and alerts (mail) top sources that (try to) establish over X session within a given timeframe. Would this be possible using the Event Handlers within FortiAnalyzer?