Hi,

How can I detect when a event I'm expecting does not come

for example this event must come to know that everything it's fine so
when this event does not arrive something is going bad and I have to
send an email. How can I detect this in a correlation rule?

EventName:"Working"


Regards


--
edgargc
------------------------------------------------------------------------
edgargc's Profile: https://forums.netiq.com/member.php?userid=620
View this thread: https://forums.netiq.com/showthread.php?t=3057