IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
Back to discussions
Expand all | Collapse all

Offenses Generated without reaching the Threshold set to fire offense

  • 1.  Offenses Generated without reaching the Threshold set to fire offense

    Posted 09/26/19 09:14 AM
    Hello Team,

    I have created to the Login failure Rule to trigger an offense when the failed login matched 5 times in 5 minutes. 
    However, I'm seeing offenses with the event count as low as 1, 2, 3 or 4. I'm I missing out on something?

    Regards, 
    Shiva

    ------------------------------
    Shiva Yepuri
    ------------------------------


Related Content