This option specifies the time interval, in seconds, between logged events, and is used for event consolidation. It is available for all reports of the Audit Log report category except “Top inserted USB & FireWire devices” reports.

Given that a single user action often causes multiple events, DeviceLock consolidates events when retrieving them from the audit log for reporting purposes. DeviceLock compares the time stamp of the event with the time stamp of subsequent events. When this time delta is less than or equal to the Threshold value, multiple events of the same type (either Allowed or Denied) are combined into a single summary event if all of the following conditions are true: