2 Replies Latest reply on Mar 14, 2013 2:11 PM by russell5

    Correlation with 2 rules but same source user?

      Hello

      I created a correlation rule that requires 2 rules to trigger the correlation rule but i need those 2 rules to have the same source user in them.

       

      I have looked through the help but cant find out how to do this.

       

       

      I feel it should be able to do this but as of now it is not.