AnsweredAssumed Answered

zero size in correlation rule

Question asked by Rajbir Yadav on Jan 22, 2014
Latest reply on Mar 5, 2014 by Rajbir Yadav

i have made a correlation rule for 5 or more than 5 time  failed logon on a single ip or single destination but when alert goes hit then we are not able to see meta key, in event viewer it showing 0 size.

refer attached screen shot.

Attachments

Outcomes