Novell SENTINEL 6.1 SP2 - 02-2010 User Manual page 70

NOTE: In Sentinel 6, filter criteria must be defined in the correlation rule wizard. You cannot use
existing public filters.
To create a simple rule:
1 Open the Correlation Rules Manager window and select a folder from the drop-down list to
which this rule is added.
2 Click Add button located on the top left corner of the screen. The Correlation Rule window
displays. Select Simple Rule.
3 In the Simple Rule window, define a condition for this rule. Select the Property and Operator
values from the drop-down lists and specify data in value field.
70 Sentinel 6.1 User Guide