Correlation RulesCorrelation Rules Guide

When a correlation rule triggers an alert, information such as the rule name, time, and severity is logged by the Exabeam Security Operations Platform. These details are visible in alert details such as in Alert and Case Manager and Threat Center.

To monitor metrics for correlation rules, you can also view the Alert and Correlation Rules Management pre-built dashboard or create visualizations in Dashboards using correlation rule attributes.

When you create a visualization, Correlation Rule attributes are listed under Correlation Rules.