Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
kb1
Collaborator

What is a correlation unit on smartevent?

So i have enabled SmartEvent for the first time on our active management server running R80.20, and upon opening SmartEvent the first thing that pops up is "correlation units are not defined, define correlation units" , what is that? do i need to configure that or shall i leave it as is?

Thank you.

0 Kudos
3 Replies
kb1
Collaborator

never mind looks like i cannot add any devices anyways.

0 Kudos
PhoneBoy
Admin
Admin

A correlation unit is for taking logs and turning it into events.
You can have dedicated correlation units, which are less necessary in R80.x as this is largely done automatically.
They can still be necessary when processing a large chunk of firewall connection logs.

0 Kudos
kb1
Collaborator

thank you

0 Kudos