Hi,

For correlation rule alert emails every subject line is the same
'Correlation Rule Triggered' is it possible to change this so it
displays elements of the event that triggered it. Like 'Account Locked
out' or 'Insufficient Privileges' etc.

Regards,

Paul


--
rochfordp
------------------------------------------------------------------------
rochfordp's Profile: https://forums.netiq.com/member.php?userid=6749
View this thread: https://forums.netiq.com/showthread.php?t=50050