Posted By
Sivachandu Gudivada
Mon September 14, 2020 01:43 PM
Found In
Egroup:
IBM Security QRadar
\
view thread
Hi All, I have a rule configured as below: Apply Rule Name on events which are detected by Global system AND when an event matches one of the following CONDITION A AND when none of the following CONDITION B matches in 5 minutes after CONDITION A matches for same Property1 Even if the condition ...
|