Managing Correlation Policies

Once you have created a correlation policy, by default, it is listed under the Active Rules UI where you can Edit, Sort, Delete, Disable, and View the rules that are configured successfully. 

Editing a Correlation Policy

To edit the correlation policy,

1. From the Active Rules UI, click next to the configured policy.
2. Select Edit from the dropdown menu.
   Rule editing enables on the screen.
3. Change/Modify the details wherever needed.
4. Click Save Correlations.

Disabling a Correlation Policy

To disable the correlation policy,

1. From the Active Rules UI, click next to the configured policy.
2. Select Disable from the dropdown menu. A pop-up appears on the screen.
3. Click Yes, if would like to disable a policy. Otherwise, click No to cancel.

Reordering a Correlation Rule

To reorder the correlation rules,

1. From the Active Rules UI, clicknext to the configured policy.
2. Select Move from the dropdown menu. A pop-up appears on the screen.
3. Select any rule that you wish to reorder.
4. Click Move Below/Move Above. A rule will be reordered accordingly.

Deleting a Correlation Policy

To delete the correlation policy,

1. From the Active Rules UI, clicknext to the configured policy.
2. Select Delete from the dropdown menu. A pop-up appears on the screen.
3. Click Yes. Otherwise click No to cancel..

Viewing a Correlation Policy

To view the correlation policy,

1. From the Active Rules UI, click next to the configured policy.
2. Select View from the dropdown menu. 

Reordering a Correlation Policy

To reorder a policy,

1. From the Active Rules UI, click Up or Down arrow. A policy will be moved upwards or downwards.
2. Select Six dots menu. Drag and drop the policy wherever required.