Has anybody run Historical Correlations?
Im curious how I can set a rule to cover all events coming in for a historical time frame, say jan 10-21 2015.
The KB article is informative but glosses over a scenario such as this.
1. Make sure you enable the required correlation rules required on the historical correlation engine.
2. Go to Historical tab (Make sure Enable Historical Correlation is checked).
3. Create a filter with the desired time frame + anything else you want to filter.
4. Run the query. Time depends on the amount of data and correlation rules.
Make sure your dashboard is set to cover the time period in step 3.