Novell SENTINEL 6.1 SP2 - 02-2010 User Manual page 72

To create an aggregate rule:
1 Open the Correlation Rules Manager window and select a folder from the drop-down list to
which this rule is added.
2 Click Add button located on the top left corner of the screen. The Correlation Rule window
displays. Select Aggregate Rule.
3 In Aggregate Rule window, you can select a sub-rule to create an aggregate rule. To select a
sub-rule, click Add Rule button. Add Rule window displays.
NOTE: You can select only one sub-rule when creating an aggregate rule.
72 Sentinel 6.1 User Guide