An Event Tracking Table (ETT) is a data buffer. It can store combinations of attributes. Each entry in the table has an individual timeout. Event tracking tables are used in Advanced Correlation scenarios.


For example, an event tracking table can track 1000 IP addresses with 101 ports each. This means, the data structure can contain 101000 entries in total.


See Setting Up Event Tracking Tables (ETT) for an example.