The Event Count Key specifies which IP address and or ports are used when determining unique instances of a signature’s traffic.