fix: [evnet view] excluding correlations should also exclude over_correlated attributes, fixes #9366

pull/9741/head
iglocska 2024-05-02 21:35:23 +02:00
parent 4f2638b687
commit 6f2e162fd8
No known key found for this signature in database
GPG Key ID: BEA224F1FEF113AC
1 changed files with 3 additions and 0 deletions

View File

@ -5006,6 +5006,9 @@ class Event extends AppModel
$include = $include && ($filterType['correlation'] == 1);
} else { // `exclude`
$include = $include && ($filterType['correlation'] == 2);
if (!empty($attribute['over_correlation'])) {
$include = false;
}
}
if ($filterType['correlationId'] && $include) {