MultiHost Correlation Rule

Has anyone applied a correlation rule to a multi-host source? I’m trying to avoid having to edit the config for each source in the multi-host and apply it to all of them at once.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.