AnsweredAssumed Answered

no meta key for correlated alert

Question asked by Rajbir Yadav on Jan 22, 2014
Latest reply on Jan 23, 2014 by Lee Kirkpatrick

i have made a correlation rule for 5 or more than 5 time  failed logon on a single ip or single destination but when alert goes hit then we are not able to see meta key, in event viewer it showing 0 size.

refer attached screen shot.

Outcomes