Previous Topic: Correlation Service Fails to Initialize on StartupNext Topic: Line Break Does Not Function in Correlation Wizard Fields


Correlation Rule Filters Fail to Identify Incident Events

Symptom:

An event correlation rule filter fails to identify events as expected when using wildcards. For example, a rule set to match the value "test*" does not return values beginning with "test", such as "testa"

Solution:

The correlation engine uses strict regular expression syntax as regards wildcards. So in this example, you would have to use "test.*" to return the results you want.