Processing Rule Properties, Consolidate Tab

Allows you to specify the event fields that must be identical for a consolidation rule match. If identical data in these fields is received in the specified amount of time, the events are consolidated into a single event. The fields are defined as follows:

Select which event fields must be identical for events to be consolidated
Specifies the event fields that must be identical in order to match the consolidation rule.
Events must occur within ___ seconds
Specifies that matching events must occur within the selected time.