Correlations

Find the common thread behind a burst of problems. Correlation analysis groups related events across your fleet so a wave of alerts points to one root cause instead of ten separate fires.

Run an analysis

1. Go to Insights → Correlations.
2. Run analysis — DashX looks back over a window (e.g. the last 24 hours, grouping events within a few minutes of each other) and surfaces correlated event clusters.
3. Open a correlation to see the related events, the devices involved, and the likely root cause.

Using it

When many devices alert at once, a correlation usually reveals the shared trigger — a failed dependency, a network blip, a bad change — so you fix the cause once rather than chasing symptoms.

note

Low compliance/posture scores and other signals feed correlations too, so a cluster can tie a config change to the failures that followed it.