Hi,

We have a requirement where it is needed to generate an alert if the
user don't access to internet within 2 hours after a successful login.

Is this possible with a correlation rule?

Thanks.


--
yorenet
------------------------------------------------------------------------
yorenet's Profile: https://forums.netiq.com/member.php?userid=8297
View this thread: https://forums.netiq.com/showthread.php?t=52209