Getting to understand how to use Graylog’s correlation feature. Can you please confirm what of the two statements displayed in the GUI is correct?
On Event Correlation tab: Event 1 “Should occur at least” X
On Event Summary tab: Should occur X time
I believe it is the latter on v3.3.0-5.