2 questions, my rules will not fire and I'm pretty sure my correlations are set correctly (identical filter works perfectly). I work in an IT dept with 3 other people, who may or may not have the LEM web console open could this be the problem? I have applied/saved/activated so many times still no rules will fire. I even tried using precanned rules from SolarWinds, still nothing fires! If all open consoles have to activate how can I do this if the other IT staff isn't here to access their browser? Seems very clunky to not allow a person to activate a rule if others have the LEM console open...
Attached a screenshot of the correlations in the rule.