Sentinel: Correlation Engine Process (correlation_engine) Explained

  • 3300397
  • 18-Aug-2006
  • 26-Apr-2012

Environment

Microsoft Windows Server 2003 Standard Edition
Microsoft Windows 2000 Server
RedHat Linux
Solaris 9

Situation

What is Correlation Engine Process (correlation_engine)?

Resolution

The Correlation Engine (correlation_engine) process receives events from the Wizard Agent Manager and publishes correlated events based on user-defined correlation rules.