Event Correlation detection - tiebreaker field

Elastic Security
1

Hi,

I need to use a tiebreaker field within an Event Correlation detection rule, I cannot find in the docs other than for a query, hoping its possible somehow

Thanks

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.