Number of 4XX responses from Provider API greater than N in Y duration

[philbrookes]

come up with an alert query that will allow a user to specify that if the number of 4xx increases more than N in Y duration an alert will fire.

Recreate by e.g. bad auth, or bad geo code.

This will need to be tested that it does fire when expected.

Also some details on potential causes, and how to investigate and troubleshoot.