156-915.80 · Question #62
SmartEvent does NOT use which of the following procedures to identify events?
The correct answer is C. Matching a log against local exclusions. Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events: Matching a Log Against Global Exclusions Matching a Log Against Each Event…
Question
SmartEvent does NOT use which of the following procedures to identify events?
Options
- AMatching a log against each event definition
- BCreate an event candidate
- CMatching a log against local exclusions
- DMatching a log against global exclusions
How the community answered
(14 responses)- A14% (2)
- B7% (1)
- C79% (11)
Explanation
Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events: Matching a Log Against Global Exclusions Matching a Log Against Each Event Definition Creating an Event Candidate When a Candidate Becomes an Event https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm
Topics
Community Discussion
No community discussion yet for this question.