The Correlation Unit performs all but

which of

the following actions:

A. Marks logs that individually are not events, but may be part of a larger pattern to be identified later

B. Generates an event based on the Event policy

C. Assigns a severity level to the event

D. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event