graylog-plugin-correlation-count icon indicating copy to clipboard operation
graylog-plugin-correlation-count copied to clipboard

Published 20 hours ago • verified publisher icon airbus-cyber

Document how the correlation works precisely

Open frantz45 opened this issue 3 years ago • 0 comments

Events from stream1 should occured strictly before/after those from stream2. If they happen at exactly the same time (milisecond) it will not trigger an Event. It should be documented in the README file.

frantz45 avatar Sep 19 '22 09:09 frantz45