|
Event correlation
involves processing events based on the relationships
between those events in order to:
- Reduce the number of events: Events are deleted based on previous, current or future events. This is in contrast with simple filtering which does not compare events with other events.
|
|
- Modify events or create new events: The resulting event's content can
include data from other events, external processes or ECS Stores.
|
|
|