What is SmartEvent "Traffic" Event?

[Michael_Horne]

Hello all,

I am still getting to grips with SmartEvent and I have come across a particular event on a regular basis that I do not really understand. There is so little useful information that am having trouble identifying the cause:

The only useful information is the Start and End time of the event. Basically I have an event "Traffic". There is no origin Security Gateway mentioned, source, destination or service mentioned. There is no Rule Category or Event Name, to allow me to identify where in SmartEvent I might look to understand or control this type Event.

Give that the event start and end times, tend to always indicate a long event duration, could it be related to a long lasting sessions (multiple connections between the same client and server for the same service) that is reaching some limit?

Many thanks,

Michael

[G_W_Albrecht]

Have a look here for Event Type Correlated: sk112896: Blade events can be seen in SmartEvent NGSE and R80.x GUI even though they are not enabled...

[Michael_Horne]

Hi,

Thanks for the SK reference. It might be part of the explanation, what I am seeing though are entries of type "Correlated" and not "Log".

I would still be curious as to what the entry is trying to tell me as I see not useful information in it.