Owner's Manual

Events, Rules and Actions 821
Figure 34-5. Device Access Options
The Options panel has the following fields:
-
Access Type —Select the type of access ( User Login, User Logout, Login Failure, Config
Change
).
-
UserName Variable —Enter the UserName variable label.
-
UserName RegEx —Enter a regular expression to extract the user name from the event’s
Username Variable.
-
Suppress Correlated —Check this if you want to suppress the alarm for an event triggering this
rule.
NOTE:
If your filter returns more than a single event, then the UserName Variable and UserName RegEx fields
are disabled.
Event Filter Criteria on page 818 describes how you can select the correlated event(s)
Frequency
This is a Pattern Detection correlation. It changes event behavior based on occurrence frequency.
The Screen that appears next includes the standard
Rule Properties and Event Filter sections, and
adds the frequency configuration in the
Options panel at the bottom of the screen.
Figure 34-6. Frequency Options
The Options panel has the following fields:
-
Duration (seconds) —This is the period during which the application measures event frequency.