Hi Dojo,
I like to have some help,
We have a table, and I like to create a correlation alarm between to different time, if time difference is bigger then 5 minutes.
In this case, I like to compare the Session Update Times, if they stay under the 5 min differece,that is al fine, above like to see that we get an alarm. So the first one which finished is the “Capture source from input “, and then “SFTP to”
Hi Pascal,
I don’t think this can be achieved using a correlation rule. Correlation rules work on alarms, which means you would first need alarms to correlate. From your description, it’s not clear that such alarms exist.
The logic you’re looking for would be better implemented directly in the connector. For example, you could add a standalone or table parameter that calculates the time difference you want to monitor. After that, it would simply be a matter of configuring the corresponding alarm template.
However, if modifying the connector is not an option, you would need to consider alternative approaches. One possibility is to use an automation script triggered by the scheduler. The script could send a notification by email or set a specific parameter to trigger an alarm.