First, enter your exclusion for ALL source addresses:RecordOfExcludedPattern 1234 * * * This excludes ALL sub signatures of signature '1234' from ALL sources to ALL destinations.Next, add back the source that you want to alarm:RecordOfIncludedPatter...

Does this problem involve predominantly the Sweep signatures?

I spent some time today looking over the Summarization feature set to see if there was a problem with it but have been unable to isolate a problem. Could you give me some more specific details concerning the problem you are having with GlobalSummari...