QUESTION

What is the valid syntax for a rule's dedup period in Panther?

ANSWER

The correct syntax is: DedupPeriodMinutes

To use a number of days for your dedup period, multiply the number of days by 1440 and use the result for this value (1440 minutes in 1 day).