B.7.16 UnDeploy All Rules From Engine
Correlation Engine : UnDeploy All Rules From Engine
Table B-84
Tag
Value
Severity
Event Name
undeployAllRulesFromEngine
Resource
CorrelationManagementService
SubResource
CorrelationManagementService
Message
Undeploy all rules from Engine:
B.7.17 UnDeploy Rule
Correlation Engine : UnDeploy Rule
Table B-85
Tag
Value
Severity
Event Name
undeployRule
Resource
CorrelationManagementService
SubResource
CorrelationManagementService
Message
Undeploy Rule: {ruleCfgId}
B.7.18 Update Correlation Rule Actions
Correlation Engine : Update Correlation Rule Actions
Table B-86
Tag
Value
Severity
Event Name
updateCorrRuleActions
Resource
CorrelationManagementService
SubResource
CorrelationManagementService
Message
Update Rule Config {0} by deleting Actions: <actionID> and adding Actions:
<actionID>
B.8 Event Source Management:General
Section B.8.1, "Collector Manager Initialized," on page 446
Section B.8.2, "Collector Manager Is Down," on page 447
System Events for Sentinel 445