The Correlation Unit Performs All but the Following Actions

The Correlation Unit performs all but the following actions:

A) Marks logs that individually are not events, but may be part of a larger pattern to be identified later.
B) Generates an event based on the Event policy.
C) Assigns a severity level to the event.
D) Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.