Hi.. I have question relating to combining filters in a correlation rule to pruduce one alarm.

1. A device generates two alarms at approximately the same time. These alarms are identified by their event ID's 34003 and 32001
2. I want to generate a correlated alarm which triggers upon these two alarms arriving together. They arrive within 10 seconds of each other but are related (if you get a 34003, 10 secs later you may a 32001 alarm for the device).
3. I dont want the correlated alarm to trigger individually on these alarms but trigger when these two alarms arrive within 10 secs of each other. so combining the alarm conditions into one correlated alarm.

Thanks