2012-02-24
06:06 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Use Enhanced Taqgging for correlation rules?
Is it possible to use the new Enhanced Tagging for correlation rules for alerting? Right now I think I have it setup correctly but I'm not seeing alerts.
I'm thinking it may not be possible. I note that the documentation does say it is for reports only. But if that is true why would the variables be visible in the Correlation Rule builder?
1 Reply
2012-02-27
03:29 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
I think enhanced tagging can be used for correlation rules, but not the "Direction" field. Not sure if that replaces Inbound/Outbound or what.
