After creating an event rule, events are found that match the filter, but it is taking longer than expected to trigger the action.
When viewing the event rule in the console, new events are appearing that match the event rule, but the event is showing as pending.
The matching event does not move from pending to complete in a timely fashion.
The Prevalence file property is being used to filter the event rule.
When the Prevalence file property is used for the filter, the Bit9 Server waits to process the event rule until the prevalence is calculated again. This calculation is done asynchronously, which means that the recalculation of prevalence will not be done immediately.
If the event rule must be calculated immediately, you will need to remove the Prevalence filter.