Skip to main content

Correlation RulesCorrelation Rules Guide

Clone a Correlation Rule

Clone an existing rule as a starting point for a new correlation rule.

  1. On the Rules tab, select a rule to clone:

    • Click on a rule, then click Clone.

      correlationrules-clonerule.png

    • For the rule you're cloning, click the More menu The more menu; three vertical grey dots on a white background., then select Clone.

  2. Name the new rule.

  3. Click Clone. The new rule is created in Disabled status. To customize the rule, edit the rule.