2014-07-14 10:57 AM
I am starting to work on Security Analytics ESA for correlation rules. Is there any guide available which I could refer for designing the correlation rules? A basic guide which could help me understand the syntax of the rules.
2014-07-14 11:46 AM
Try this portion of the documentation...
http://sadocs.emc.com/0_en-us/095_10.3_User_Guide/50_Alerting/Configure_ESA_Rules/Define_an_Advanced_ESA_Rule
