I wanna have your opinion on the implementation of alarms on multiple same events triggering in SIEM.
If multiple times or a specific number of times an event is generated from device the alarm should be generated.
Is it possible to accomplish this. ?
Solved! Go to Solution.