@Spearruleina, here is an example
SELECT incident.ticketnumber, cast(adx_portalcomment.createdon as datetime) as createdon ,adx_portalcomment.createdby
FROM incident
JOIN adx_portalcomment ON incident.incidentid = adx_portalcomment.regardingobjectid
WHERE adx_portalcomment.statuscode = 1
AND adx_portalcomment.adx_portalcommentdirectioncode = 2
AND cast(adx_portalcomment.createdon as datetime) < '2023-09-07 11:30:30.000'
HAVING count (adx_portalcomment.regardingobjectid) > 1
I can also share with you the part of the flow we use for such an alert. 
We are happy to have a call with you to go over what I did and how it works if you find it interesting for your use case.