cancel
Showing results for 
Search instead for 
Did you mean: 

Who Me Too'd this topic

Log forwarding profile for Correlated Events?

L1 Bithead

Hello all,

 

It appears that we have had at least a single correlated event in the past seven days, but did not recieve any alert related (via any configured log forwarding profile).

 

It appears the each match that was correlated did perform a log action, but the actual correlated event did not.

 

How do I attach a log forwarding action for Correlated Events?

 

 

Thanks,

 

Matt

Who Me Too'd this topic