Alerting really doesn't help. We're looking for trending and things of that nature. What I want to do is setup a query that runs every x amount of time. Then store the results in the DB. I can then easily look for repeat offenders and other trends based on the data. Just getting alerts will help once we get ahead of the issue but right now we are talking 4k+ APs so alerting will wash out for now.