Our enVision-solution integrates log sources for several of our customers. I would like to create one view for each customer, and then use the same correlation rules in each view, but they should of course only trigger for events belonging to the particular customer.
View_customer_1: Correlation_rule_1, filter on device group = customer 1
View_customer_2: Correlation_rule_1, filter on device group = customer 2
Is this (or something similar) possible?
Best regards, Anne Siri