Hi,

How can I detect when a event I'm expecting does not come

for example this event must come to know that everything it's fine so when this event does not arrive something is going bad and I have to send an email. How can I detect this in a correlation rule?

EventName:"Working"


Regards