Correlation RulesCorrelation Rules Guide

Preview Correlation Rule DetailsPreview Correlation Rule Details

Quickly view a summary of a correlation rule.

Edit a Correlation RuleEdit a Correlation Rule

Change the query, conditions, and outcomes for a correlation rule.

Test a Correlation RuleTest a Correlation Rule

To test a correlation rule and ensure it works as you expect, enable the rule in test mode.

Enable or Disable Correlation RulesEnable or Disable Correlation Rules

Enable rules to activate them or disable rules to deactivate them without deleting them.

Clone a Correlation RuleClone a Correlation Rule

Clone an existing rule as a starting point for a new correlation rule.

Delete Correlation RulesDelete Correlation Rules

Delete multiple correlation rules or a single correlation rule you no longer need.