4.9 Viewing Correlation Events

  1. Launch the Correlation interface.

    For more information, see Section 4.2, Accessing the Correlation User Interface.

  2. In the Correlation panel, select any rule, then click .

    The events that match the rule criteria are displayed in the search results panel. The correlation events are displayed with the icon.

  3. (Optional) Click View triggers to view the events that generated the correlation event.