Enable network traffic-based alert grouping

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 1 Minute Lesedauer

    • Activate network traffic-based alert grouping to automatically correlate and reduce alert noise by grouping related events based on network traffic patterns. This helps improve efficiency in alert response and streamlines alert management.

    Vorbereitungen

    Ensure the Service Mapping Plus application (sn_sm_scoped_app) is installed.

    Role required: evt_mgmt_admin

    Warum und wann dieser Vorgang ausgeführt wird

    Prozedur

    1. Navigate to All > Event Management > Administration > Alert Correlation Properties.
    2. Ensure that the property Enable Network Traffic correlation (sa_analytics.agg.query_network_traffic_correlation_enabled) is selected.