Opened 10 years ago

Closed 10 years ago

Last modified 6 years ago

#264 closed enhancement (fixed)

Add a deadtime for correlate rules to avoid multiple reports

Reported by: rainer Owned by: rainer
Priority: major Milestone: 2.8.6
Component: main Version:
Keywords: Cc:

Description (last modified by rainer)

Correlations will get reported once every second until the keep rules expire, so we need to specify a deadtime.

Change History (1)

comment:1 Changed 10 years ago by rainer

Description: modified (diff)
Resolution: fixed
Status: newclosed

Patch committed as changeset [358], new option LogmonDeadtime added.

Note: See TracTickets for help on using tickets.