What is the SmartEvent Correlation Unit’s function?
A.
Analyze log entries, looking for Event Policy patterns.
B.
Display received threats and tune the Events Policy.
C.
Assign severity levels to events.
D.
Invoke and define automatic reactions and add events to the database.
A
Answer A.
The Correlation Unit analyzes each log entry as it enters a Log server, looking for patterns according to the installed Event Policy. The logs contain data from both Check Point products and certain third-party devices. When a threat pattern is identified, the Correlation Unit forwards what is known as an event to the SmartEvent server.
A. Analyze log entries, looking for Event Policy patterns.
https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17393.htm