Correct, The SmartEvent Correlation UnitClosed analyzes the log entries and identifies events from them. During analysis, the SmartEvent Correlation Unit:
-Marks log entries that are not stand-alone events, but can be part of a larger pattern to be identified later.
-Takes a log entry that meets one of the criteria set in the Events Policy, and generates an eventClosed.
-Takes a new log entry that is part of a group of items. Together, all these items make up a security event. The SmartEvent Correlation Unit adds it to an ongoing event.
-Discards log entries that do not meet event criteria.
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_LoggingAndMonitoring_AdminGuide/Topics-LMG/SmartEvent-Correlation-Unit.htm#:~:text=SmartEvent%20software%20component%20on%20a,pattern%20to%20be%20identified%20later.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
wahyunugroho
2 months, 3 weeks agolordlich
9 months agoLatze
1 year, 8 months ago