Could someone give me a more detailed explanation of correlation time?
I'd like to create a rule for a particular email notification. The problem is that I only want to be notified on the first instance of this event, but when this particular problem pops up, it can sometimes start logging dozens of events per minute and I don't want to get notified over and over.
What's the appropriate way to do this?
Thanks!
--
Andy