Hi
I create rule with Deviation Component
my question is if i set 48 hours in sample size , ESM will calculate the avg between the total values for each hour ?
for example :
day 1 :
00:00 - 01:00 - 40 events
day 2:
00:00 - 01:00 - 100 events
what will be the value that ESM look for between 00:00 -01:00 in the 3rd day ? 70 ?
You Deserve an AwardDon't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
-
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
- Find Forum FAQs
- Learn How to Earn Badges
- Ask for Help
Join the Community
-
Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:
- Get helpful solutions from McAfee experts.
- Stay connected to product conversations that matter to you.
- Participate in product groups led by McAfee employees.
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA