How does a rule generate a new Correlation Rule Engine (CRE) event?

Question

Options

• ACRE cannot create events, only log sources can.
• BBy letting it create an offense. Offenses are thesame as CRE events.
• CBy creating a rule response. In the rule response, check the box Generate a New CRE Event.
• DBy forwarding the event as a syslog message to the local event collector using the rule response

• A
  9% (3)
• B
  3% (1)
• C
  71% (24)
• D
  18% (6)

No community discussion yet for this question.