Event Generation

When a candidate becomes an event Record of a security or network incident that is based on one or more logs, and on a customizable set of rules that are defined in the Event Policy., the SmartEvent Correlation Unit SmartEvent software component on a SmartEvent Server that analyzes logs and detects events. forwards the event to the Event Database. But to discover an event does not mean that SmartEvent stops to track logs related to it. The SmartEvent Correlation Unit adds matching logs to the event as long as they continue to arrive during the event threshold. To keep the event open condenses what can appear as many instances of the same event to one, and provides accurate, up-to-date information as to the start and end time of the event.