Case Management Features
Correlated events/alerts are clustered as cases in ZIF. Operators analyze each case that is generated and take appropriate actions as per the operating procedures.
Each correlation that is generated by the algorithm is identified by a unique ID called Case ID. Text “ZIF” is added as a prefix to the id, which helps operators track incidents created by ZIF.
Description of the case that is displayed next to the case id is the probable Root Cause for the identified correlation.