To get an alert when your organization exceeds the quota, you want to add a detection & response rule, following the example below.
Detection part of the rule:
- path: event
Sample response part of the rule that will trigger a detection called "Sensor_Quota_Reached":
- action: report
You can choose to send an alert to Slack or your ticketing system, or to take another action.