Add a deadtime for correlate rules to avoid multiple reports

[rainer]

Corelations will get reported once every second until the keep rules expire, so we need to specify a deadtime.