Hello all,
I am attempting to troubleshoot time delta issues with our correlation engine. I've collected the output of the '/user/local/ace/bin/correlator.sh -status' command and I'm looking at the number of active instances for each rule.
There's another section for the active instances of the "Details Manager." In a few instances, this lists active instances for rules that are disabled. For instance:
<status name="Ruleset: Details Manager-47-4000126" tag="47-4000126">
<property name="activeInstances">
<value>375</value>
What is this, and how is it different from the Correlation Engine?
Any information is appreciated!
Thanks,
- Steve
