cancel
Showing results for 
Search instead for 
Did you mean: 
itgfcsys
Level 9

Historical Correlation

Has anybody run Historical Correlations?

Im curious how I can set a rule to cover all events coming in for a historical time frame, say jan 10-21 2015.

The KB article is informative but glosses over a scenario such as this.

Thanks

0 Kudos
2 Replies
sssyyy
Level 12

Re: Historical Correlation

Yep.

1. Make sure you enable the required correlation rules required on the historical correlation engine.

2. Go to Historical tab (Make sure Enable Historical Correlation is checked).

3. Create a filter with the desired time frame + anything else you want to filter.

4. Run the query. Time depends on the amount of data and correlation rules.

Make sure your dashboard is set to cover the time period in step 3.

abanaru
Level 11

Re: Historical Correlation

Is there a way to see the progress of the historical correlation ? I've launched one and it seems it didn't finish not even after 20 hours.

Andrei

0 Kudos