Is there a way to configure the frequency of historical snapshots for correlation and application rules. Our application rules on our packet decoders create snapshot seemingly whenever a change is made to the existing ruleset, but most of our concentrators only have a 'current' snapshot and not historical ones. Is there a way to manually configure this?
how often do you make changes to your correlation rules on the concentrators ?
Usually a backup is only made when a change is created to the rule file. If you aren't making any changes to correlation rules then no backups may be created.