When creating a new view in the ESM, I have tried to add a pane with the list of correlated events, but I can´t find the related event query in the wizard.
Can somebody tell me how to create this pane?
in the Query Wizard select Signature ID and make a filter on your Correlation Engine.
Now you can see all correlated Events from your Correlation Engine.
Retrieving data ...