Q90
Single choice
While configuring a SIEM for an organization, a security analyst is having difficulty correlating incidents across different systems.
Which of the following should be checked first?