3.3.8 Renaming and Deleting a Correlation Rule
To rename a Correlation Rule:
NOTE: You must undeploy a rule before you rename or delete the rule.
1 Open the Correlation Rules Manager window and select the rule you want to rename.
2 If the rule is deployed, click Undeploy Rule link to undeploy the rule.
3 Click View/Edit link. In the General Description tab change the name of the Correlation Rule.
4 Click OK.
To delete a Correlation Rule:
1 Open the Correlation Rules Manager window and select the rule you want to delete.
2 If the rule is deployed, click Undeploy Rule link to undeploy the rule.
3 Click Delete link. Click Yes when the system prompts for confirmation.
3.3.9 Moving a Correlation Rule
To move a Correlation Rule:
1 Open the Correlation Rules Manager window and click Manage Folder.
2 Click and drag a correlation rule from one folder to another.
3.3.10 Importing a Correlation Rule
To Import a Correlation Rule:
1 Open the Correlation Rules Manager window and click Import/Export Correlation Rule icon.
The Import Export Rule window displays.
80
Sentinel 6.1 User Guide