What is a correlation unit on smartevent?

[kb1]

So i have enabled SmartEvent for the first time on our active management server running R80.20, and upon opening SmartEvent the first thing that pops up is "correlation units are not defined, define correlation units" , what is that? do i need to configure that or shall i leave it as is?

Thank you.

[kb1]

never mind looks like i cannot add any devices anyways.

[PhoneBoy]

A correlation unit is for taking logs and turning it into events.
You can have dedicated correlation units, which are less necessary in R80.x as this is largely done automatically.
They can still be necessary when processing a large chunk of firewall connection logs.

[kb1]

thank you