Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Using Time of Day in Rule Correlation

$
0
0

You would add the time field as the left hand side of the correlation, then drag and drop the appropriate time of day set onto the right side of the correlation.  It would look something like this:

 

 

What this is basically saying is that the event detection time is not contained in the Business Hours time of day set which is denoted by the red X over the contains box in the operator field.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>