Showing results for 
Search instead for 
Did you mean: 

What is the "Details Manager" in the Correlation Engine?

Hello all,

I am attempting to troubleshoot time delta issues with our correlation engine.  I've collected the output of the '/user/local/ace/bin/ -status' command and I'm looking at the number of active instances for each rule. 

There's another section for the active instances of the "Details Manager."  In a few instances, this lists active instances for rules that are disabled.  For instance:

                <status name="Ruleset: Details Manager-47-4000126" tag="47-4000126">
                    <property name="activeInstances">

What is this, and how is it different from the Correlation Engine?

Any information is appreciated!


- Steve



Tags (2)
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator