Hello,

I am attempting to configure a service provider model architecture.  So far, I have one SSIM configured as the "Service Provider Master" (Enabled in Appliance option) and enabled "Store Incidents locally".  I also have two separate Correlation SSIM appliances and have set up an incident forwarding rule to the SP SSIM.  I definitely see events coming through and being correlated on the correlation SSIM devices (I see it on the statistics page), however it does not look like the SP master is receiving any of the forwarded incidents.  

Is there anything that I missed or should double check?

Thanks!