Table of Contents
Advertisement
In the Correlation tab, you can:
Create/modify Correlation rules and rule folders
Deploy Correlation rules on the Correlation engine
Create and associate an action to a rule
Configure dynamic lists
NOTE: Access to the correlation functions can be enabled by the administrator on a user-by-user
basis.
4.2 Introduction to the User Interface
In Correlation, you can see the Correlation Rule Manager, Correlation Engine Manager, Correlation
Action Manager, and dynamic lists.
You can navigate to these functions from:
Correlation User Interface
Table 4-1
User Interface
4.3 Correlation Rules
Correlation rules are created, modified, renamed, deployed, and undeployed in the Correlation Rule
Manager. Correlation rules are organized into rule folders, which can also be managed in the
Correlation Rule Manager.
NOTE: There is no limit to the number of users that can access Correlation rules. When more than
one user is editing the same rule, the last person to save overwrites all previous saves.
Section 4.3.1, "Opening the Correlation Rule Manager," on page 86
Section 4.3.2, "Creating a Rule Folder," on page 86
Description
The Correlation menu in the Menu bar
The Navigation tree in the Navigation pane
The Toolbar buttons
Correlation Tab
85
Advertisement
Table of Contents
