Granularity works with clone alerts. After the first clone alert is triggered, the granularity determines when a second clone alert is sent if the user keeps adding more clones. If the trigger is at 10 and the granularity is at 5 then the next warning comes at 15, another at 20, and so forth.
/as services set granularity 6
Larger granularities decrease the number of clone warnings, which can be useful on larger networks. Smaller granularities make it more obvious which clone alerts need to be dealt with more urgently. Hosts that increase rapidly are almost always harmful clones, since valid hosts such as cybercafes will rarely have users all deciding to log in to your server within seconds of each other.