Please help in finding a solution to the problem i am facing with the particular correlation rule.
I am trying to setup a correlation rule where if a source user logs in and doesnt logout within a specified period of time then the rule should trigger.
I have setup two componensts:
------. Login should happen
within 2 minutes
------- Logout shud not happen
For no logout condition i have used the following conditions:
And clicked the checkbox below:
But the rule is not working.
I have even checked the individual components.
The login part is working but the "no logout" part is not working.
Please help in resolving the problem or suggesting any alternative approach.