Idea ID 2707107
Good day all,
I'm looking to see how efficient our teams are when using correlation rules. A simple extract from the event perspective allows you to filter for the events in a view or business service, but it cannot tell me what rule an event, or events has passed through. Would be terrifically useful if I could grab a report for a business service or view to see what correlation rule or rules an event has been "touched" by.
Anyone done this, or know how to do it?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.