#264 closed enhancement (fixed)
Add a deadtime for correlate rules to avoid multiple reports
Reported by: | rainer | Owned by: | rainer |
---|---|---|---|
Priority: | major | Milestone: | 2.8.6 |
Component: | main | Version: | |
Keywords: | Cc: |
Description (last modified by )
Correlations will get reported once every second until the keep rules expire, so we need to specify a deadtime.
Change History (1)
comment:1 by , 13 years ago
Description: | modified (diff) |
---|---|
Resolution: | → fixed |
Status: | new → closed |
Note:
See TracTickets
for help on using tickets.
Patch committed as changeset [358], new option LogmonDeadtime added.