Hi Dojo,
I am trying to use the value of an information event to trigger a correlation rule.
Tried a saved filter on the value of an information event and also tried an alarm filtering with severity "information". However, no success with any of the tried approaches.
Can you give a basic hint on how to convince a correlation rule to be triggered by an information event?
Thanks
Jörg
Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 11th July 2023
Hi Jörg, does the answer on the following question help you?
Parse Information Event - DataMiner Dojo
Kind Regards,
Jarno
Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 11th July 2023
This helped indirectly because it gave the hint to tick “single event”. Seems like it’s working now. Thanks for all suggestions.