cancel
Showing results for 
Search instead for 
Did you mean: 

What is the "Details Manager" in the Correlation Engine?

Hello all,

I am attempting to troubleshoot time delta issues with our correlation engine.  I've collected the output of the '/user/local/ace/bin/correlator.sh -status' command and I'm looking at the number of active instances for each rule. 

There's another section for the active instances of the "Details Manager."  In a few instances, this lists active instances for rules that are disabled.  For instance:

                <status name="Ruleset: Details Manager-47-4000126" tag="47-4000126">
                    <property name="activeInstances">
                        <value>375</value>

What is this, and how is it different from the Correlation Engine?

Any information is appreciated!

Thanks,

- Steve

 

 

Tags (2)
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community