Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Question on "Correlation Time" in LEM Rules

$
0
0

This is an old thread, but I'm wondering why a way to do a threshold of one isn't available.  I'm not finding any info so far that explains it.  Is it a technical issue/performance issue prevention thing or just an interface limitation that the Re-Infer (TOT) option is in the advanced correlation window ?

 

Seems to me that feature would be very useful...


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>