Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Query regarding Rules in MARS

Hello Friends,

Please let me know what type of Event these rules will trigger? (REFER ATTACHED DOC SCREENSHOT)

Specifically I want to know the meaning behind “Count”. If I increase the count field to 2 or 3 what will it do.

Also the time I configured is 10 minutes. Is it like it will check the condition for a time period of 10 minutes? What is the significance of time field here?

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Query regarding Rules in MARS

Hi,

Was just wondering if the query is resolved. if so, please mark this as answered

Thanks and Regards,

Prapanch

3 REPLIES
Cisco Employee

Re: Query regarding Rules in MARS

Hi Rashid,

The below link should give the description of each of the fields:

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/user/guide/combo/rules.html#wp532081

The field "Count" refers to the number of times the event in the "Event" field has to fire within the "Time Range" specified for this Rule for the condition to be met. Hope this helps!!

Regards,

Prapanch

Cisco Employee

Re: Query regarding Rules in MARS

Hi,

Was just wondering if the query is resolved. if so, please mark this as answered

Thanks and Regards,

Prapanch

New Member

Re: Query regarding Rules in MARS

Hi Rama, thanks for the support

763
Views
0
Helpful
3
Replies
CreatePlease to create content