Rule Test Service Considerations

The rule test service controls how CA User Activity Reporting Module tests correlation rules. You can set the following rule test values.

Event Limit: Defines how many events are retained per incident when accumulation is enabled. The Event Limit helps prevent undue traffic caused by correlation in periods of high activity. When this limit is reached, additional events are lost. For example, if your limit is set to 100, a single rule can accumulate up to 100 recorded events, including the initial qualifying event or events. Accumulation continues until the event limit is reached, or more usually, gap or limit values reset the rule.
Maximum Concurrent Rule Tests: Defines the number of rule tests that can be run simultaneously on a single CA User Activity Reporting Module server.