RSA Admin

Having issues with Canned rule CRL-00014

Discussion created by RSA Admin Employee on Apr 15, 2010
Latest reply on May 7, 2010 by Gabriel Python

Hey folks,

 

I am finding it difficult to follow the correlation rule CRL-00014, I copied the rule, but the rule does not trigger properly. The variable group does not exist in the event category mentinoed in the rule. Can someone guide me how to check on this rule and make sure its working.

 

Thanks in advance

Outcomes