Managing correlation policies

This article covers how to filter, edit, sort, delete, disable or enable, and view the correlation policies listed under the ActIve Rules UI.

Filtering Correlation Policies

On the Correlation Policies listing page, you can filter the enabled correlation policies by timeframe, lables, or both.

To filter the correlation policies,

1. Click the funnel icon at the right on the policies listing page.
   A menu bar opens with Time frame and Labels fields.
2. Select one or more options from Time frame or Lables, or both fields.
3. Click Apply.
   This filters your desired correlation policies to appear on the page.
   

Editing a Correlation Policy

To edit the correlation policy,

1. From the Active Rules UI, click next to the configured policy.
2. Select Edit from the drop-down menu.
   The rule editor appears on the screen.
3. Change or modify the details wherever needed.
4. Click Save Correlations.

Disabling a Correlation Policy

To disable the correlation policy,

1. From the Active Rules UI, click next to the configured policy.
2. Select Disable from the drop-down menu. A pop-up appears on the screen.
3. Click Yes, if would like to disable a policy. Otherwise, click No to cancel.

Reordering a Correlation Rule

To reorder the correlation rules,

1. From the Active Rules UI, clicknext to the configured policy.
2. Select Move from the drop-down menu. A pop-up appears on the screen.
3. Select any rule that you wish to reorder.
4. Click Move Below/Move Above. A rule will be reordered accordingly.

Deleting a Correlation Policy

To delete the correlation policy,

1. From the Active Rules UI, clicknext to the configured policy.
2. Select Delete from the drop-down menu. A pop-up appears on the screen.
3. Click Yes. Otherwise, click No to cancel.

Viewing a Correlation Policy

To view the correlation policy,

1. From the Active Rules UI, click next to the configured policy.
2. Select View from the dropdown menu. 

Reordering a Correlation Policy

To reorder a policy,

1. From the Active Rules UI, click the Up or Down arrow. A policy will be moved upwards or downwards.
2. Select the Six Dots menu. Drag and drop the policy wherever required.