RSA Admin

Correlation output to modify watchlist

Discussion created by RSA Admin Employee on Sep 16, 2009
Latest reply on Sep 17, 2009 by RSA Admin

Hi There,

 

Just wonder if we can configure correlation output to modify a watchlist to add an item (with different attributes) and the time. It would be even better if the system can time out these items or can we write rule to time them out. 

 

What I have read so far does not indicate that enVision has these capabilities. 

 

Thanks, 

 

kng

Outcomes