Opened 9 years ago

Closed 9 years ago

Last modified 5 years ago

#264 closed enhancement (fixed)

Add a deadtime for correlate rules to avoid multiple reports

Reported by: rainer Owned by: rainer
Priority: major Milestone: 2.8.6
Component: main Version:
Keywords: Cc:

Description (last modified by rainer)

Correlations will get reported once every second until the keep rules expire, so we need to specify a deadtime.

Change History (1)

comment:1 Changed 9 years ago by rainer

  • Description modified (diff)
  • Resolution set to fixed
  • Status changed from new to closed

Patch committed as changeset [358], new option LogmonDeadtime added.

Note: See TracTickets for help on using tickets.