Other customers have setup a correlation rule to trigger on the user account and signatureID. There is a lot of flexibility in the correlation rules engine to create that rule. Then you can setup an alarm to trigger when that correlation rule fires.
Thank you Chris.. This is perfect.. I just created the correlation rule and then alarm..