I've an open ticket with the support for the same issue, but havent heard back from them yet. The engine is still up and running, and the issue doesnt seem to be effecting anything. What version is your siem at?
I have just upgraded to 9.4.2. It's still there.
It seems to be more frequent when the incomming events are high.
Did you find a resolution to this problem? I am seeing it as well & I am at 9.4.2 & just upgraded to 20141118 and still see it.
The fix is in the most recent maintenance release, which was released to support. You can open a case and have them send you the MR. This is the information from the release notes on bugs that were addressed. The issue is actually related to real-time alarming and not the correlation engine, which is why the correlation engine continues to work
• 1018395 - "Could not send event(s) to correlator through socket - Unable to obtain lock(4)" error in messages