- Get Started with Correlation Rules
- Create Correlation Rules
- Create a Correlation Rule Using the Exabeam Nova Rule Creator
- Create a Correlation Rule from Scratch Using the Manual Rule Creator
- Create a Correlation Rule from a Template
- Create a Correlation Rule from Search
- Group by Field in Correlation Rules
- Detect Absent Events or Fields Using Correlation Rules
- Granular Suppression
- Correlation Rule Evaluation Delay
- Manage Correlation Rules
- Find Correlation Rules
- Share Correlation Rules
- View Correlation Rules Metrics
PrevNext
Get Started with Correlation Rules
Welcome to Correlation Rules, the application on Exabeam Security Operations Platform you use to create and manage rules that automatically correlate an event to a specific result.
To understand what Correlation Rules is and how to use it, here are some key concepts that might help you.
Surface well-known, well-defined abnormal behaviour and events with fact-based correlation rules.
Sequences are the building blocks for rule logic that define the events and conditions that trigger a correlation rule.
If you don't want to create a correlation rule from scratch, use a pre-built template.