Troubleshooting Correlation service issues and why correlation engine sometime stops to create new incidents

Did this article resolve your issue?

Thank you for your feedback!

Provide feedback on this article

Download Files

List of SQL queries that can be imported directly in SSIM UI

ICE.zip (3.5 KB)

shows the count of all Incidents grouped by Rule

All SSIM Incidents.zip (755.0 B)

shows the count of all currently open Incidents grouped by Rule.

Open SSIM Incidents.zip (779.0 B)

shows the Reference ID of the last Incident that has been written to the Database and should match the Reference ID of the most recent Incident that displays in the SSIM Client.

Ref ID of last Inc in DB.zip (756.0 B)

shows the count of all conclusions grouped by Rule.

Count of Conclusions by Rule.zip (824.0 B)

shows the count of Events attached to Incidents grouped by Rule.

Count of Events by Rule Name.zip (815.0 B)

Print Article
Products
Subscribe to this Article
Manage your Subscriptions
Search Again

Situation

Error

Cause

Solution

Legacy ID

Download Files


Feedback