Enhance Request for discovery_server 8.5.1 correlation rule

Idea created by Yu_Ishitani Employee on Sep 29, 2017
    New
    Score3
    • Issac08
    • Yu_Ishitani
    • lijsh06

    REQUEST

    Change OOTB correlation rule in <device>/<correlation>/<rules>/<mac> as follows.

     

    (REQUEST)

    match_on_all = "defined:PrimarySourceMacAddresses, defined:Origins"

     

    REASON

    (CURRENT OOTB value) 

    match_on_all = defined:PrimarySourceMacAddresses

     

    This OOTB value does not consider origin value, so incorrect device merging is happening

    when 2 different devices in different origins having the same PrimaryMacAddress.

    This will never be acceptable behavior in MSP (multi-tenancy)

     

    Today's IT world, MacAddress is no longer unique.