I'm trying to troubleshoot a correlation and come up with the question that, if a correlation is looking for a specific field to not contain some values but one event doesn't even have the field. Would the ACE trigger the correlation? or it would discard the event because it doesn't have the field?
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.