Alert correlation
id:
alert-correlation-245-15201226
title:
Alert correlation
text:
Alert correlation is a type of log analysis. It focuses on the process of clustering alerts (events), generated by NIDS and HIDS computer systems, to form higher-level pieces of information. Example of simple alert correlation is grouping invalid login attempts to report single incident like "10000 invalid login attempts on host X".
brand slug:
wiki
category slug:
encyclopedia
description:
Type of log analysis
original url:
https://en.wikipedia.org/wiki/Alert_correlation
date created:
date modified:
2023-04-20T11:47:08Z
main entity:
{"identifier":"Q4716231","url":"https://www.wikidata.org/entity/Q4716231"}
image:
fields total:
13
integrity:
14