Glossary: Monitoring Tools and the Identity Life Cycle

Correlation alert

Also written: correlation, correlate

An alert that fires when events from different sources fit a pattern, such as a login from a new country followed by a large download. Correlating events is the SIEM's main job.