#264 closed enhancement (fixed)
Add a deadtime for correlate rules to avoid multiple reports — at Version 1
| Reported by: | rainer | Owned by: | rainer |
|---|---|---|---|
| Priority: | major | Milestone: | 2.8.6 |
| Component: | main | Version: | |
| Keywords: | Cc: |
Description (last modified by )
Correlations will get reported once every second until the keep rules expire, so we need to specify a deadtime.
Change History (1)
comment:1 by , 13 years ago
| Description: | modified (diff) |
|---|---|
| Resolution: | → fixed |
| Status: | new → closed |
Note:
See TracTickets
for help on using tickets.
Patch committed as changeset [358], new option LogmonDeadtime added.