Configure temporal correlation

Read this document to learn how to configure temporal correlation.

About this task

Follow these steps to configure temporal correlation to group events, which occurred together historically.

Procedure

  1. Go to the Administration > Analytics configuration to access the analytics settings page.
  2. Click Configure in the Temporal correlation tile to access the temporal correlation configuration page. There are two temporal correlation capabilities to find temporal correlation, Temporal grouping and Temporal patterns.
  3. Both capabilities are enabled by default. You can easily disable the capabilities by clicking the green toggle switch. If you disable Temporal grouping , Temporal patterns is automatically disabled too. However, if you disable Temporal patterns you can still have Temporal Grouping enabled.
  4. You can also choose the Deploy policies state for Temporal grouping . Click either Deploy first or Review first to choose how policies are deployed. If you select Deploy first, the policies are automatically enabled and are added to the Created by analytics tile under Automations > Policies. If you select, Review first the policies are added to Suggested tile and are enabled only once the administrator decides to activate them.
  5. In the Temporal Patterns tile, you also have the option to choose resource attributes within the events which you want to be ignored. The ignored attributes aren't considered by the analytic when generating pattern policies. Port and Type are ignored by default.