I have an ESM and an ACE, now I need to segregate Correlated events per client, how can this be done?. I have to give a client access only to their manage ERC and view only correlated events for them only.
you can create multiple correlation engine instances, and bind the client ERC to it. So, all correlated events will come from the client ERC only.
Sorry for the confusion, YES i have an ACE on my ESM, do you have a reference i can check on how to create multiple correlation engine instances?
ACE properties > Correlation Management > Add > Rule correlation
you can then bind the new correlation engine to the customer's zone defined in ESM, and receiver device as well for that particular customer.