Change Time of an Rule
I'am trying to change the Time where a Rule matches. Actual it is the "ManagerReceiptTime" where an Condition form a Rule matches.
But I want to change the "MangerReceiptTime" to the "Endtime". Is this possbile, if yes i hope somebody could please tell me how I could do this!
Or is their another way to do change it ?
I readed the Documentation but i couldn't find anything helpfull.
A Rule (respectively Real-Time Rule) matches when an Event arrives at the ESM - thus Rules match on Manager Receipt Time.
In your Rule-conditions you can of course use EndTime as a condition, for example to track all Logins after a certain (End-) Time. Here it would of course not make sense to place MRT in the condition.