- Get Started with Threat Center
- Group Detections
- Work on Cases
- Triage Alerts in Threat Center
- Edit and Collaborate in Threat Center
- Find Cases or Alerts
- Build a Search in Threat Center
- Enter a Search Using Exabeam Query Language in Threat Center
- Enter a Search Using Natural Language in Threat Center
- Run a Recent Search in Threat Center
- Create a New Saved Search in Threat Center
- Run a Saved Search in Threat Center
- Edit a Saved Search in Threat Center
- Delete a Saved Search in Threat Center
- Sort Cases or Alerts
- View Case and Alert Metrics
- Get Notified About Threat Center
PrevNext
Edit a Detection Grouping Rule
Change the conditions and actions for a detection grouping rule.
You can't edit pre-built detection grouping rules. To change a pre-built detection grouping rule, clone the rule, then edit the rule. You can also disable a pre-built detection grouping rule.
You can't rename a detection grouping rule.
In Threat Center, click Settings, then navigate to the Detection grouping rules tab.
For a rule, click the More menu
, then select Edit.Change the conditions and actions of the rule.
Click Save.