This content has been marked as final. Show 2 replies
I wanna have your opinion on the implementation of alarms on multiple same events triggering in SIEM.
If multiple times or a specific number of times an event is generated from device the alarm should be generated.
Is it possible to accomplish this. ?