cancel
Showing results for 
Search instead for 
Did you mean: 
secnubs
Level 7

Segregate Correlated events by Client

Hi,

I have an ESM and an ACE, now I need to segregate Correlated events per client, how can this be done?. I have to give a client access only to their manage ERC and view only correlated events for them only.

0 Kudos
7 Replies
sssyyy
Level 12

Re: Segregate Correlated events by Client

you can create multiple correlation engine instances, and bind the client ERC to it. So, all correlated events will come from the client ERC only.

0 Kudos
secnubs
Level 7

Re: Segregate Correlated events by Client

How can I create multiple correlation engine instances?. Should I have to deploy ACE (Software) on every ERC that I have?

0 Kudos
sssyyy
Level 12

Re: Segregate Correlated events by Client

No, i thought you have an ACE added to ESM as a device?

0 Kudos
secnubs
Level 7

Re: Segregate Correlated events by Client

Sorry for the confusion, YES i have an ACE on my ESM, do you have a reference i can check on how to create multiple correlation engine instances?

0 Kudos
sssyyy
Level 12

Re: Segregate Correlated events by Client

ACE properties > Correlation Management > Add > Rule correlation

you can then bind the new correlation engine to the customer's zone defined in ESM, and receiver device as well for that particular customer.

0 Kudos
secnubs
Level 7

Re: Segregate Correlated events by Client

Thanks for the help,   will test it now

0 Kudos
sssyyy
Level 12

Re: Segregate Correlated events by Client

cool. when giving them access, just check the client zone and ace correlation engine device, + receiver. So they can only see their events.

0 Kudos