What does an accumulation interval mean in Correlation Alerts?
An accumulation interval defines the time window that a correlation-alert query looks back over from the current time when examining audit data. IBM Guardium documents it as the length of the interval, in minutes, that the query examines in the audit repository.
Community Discussion