Table of Contents
Advertisement
Section 4.3.3, "Renaming a Rule Folder," on page 86
Section 4.3.4, "Deleting a Rule Folder," on page 86
Section 4.3.5, "Creating a Correlation Rule," on page 86
Section 4.3.6, "Creating Correlation Rules," on page 87
Section 4.3.7, "Deploying and Undeploying Correlation Rules," on page 95
Section 4.3.8, "Enabling and Disabling Rules," on page 96
Section 4.3.9, "Renaming and Deleting a Correlation Rule," on page 96
Section 4.3.10, "Sorting Correlation Rules," on page 96
Section 4.3.11, "Moving a Correlation Rule," on page 97
Section 4.3.12, "Importing a Correlation Rule," on page 97
Section 4.3.13, "Exporting a Correlation Rule," on page 98
4.3.1 Opening the Correlation Rule Manager
1 Click the Correlation tab.
2 In the navigator, click Correlation Rules Manager. Alternatively, click the Correlation Rules
Manager button in the tool bar. The Correlation Rule Manager window displays.
4.3.2 Creating a Rule Folder
1 Open the Correlation Rule Manager window and click Manage Folder.
2 Right-click a folder and select Add Folder.
3 Specify the Rule Folder name.
4.3.3 Renaming a Rule Folder
1 Open the Correlation Rule Manager window and click Manage Folder.
2 Select a folder and click Rename. Change the name of the folder.
4.3.4 Deleting a Rule Folder
1 Open the Correlation Rule Manager window and click Manage Folder.
2 Select a folder and click Delete. Click Yes when the system asks for confirmation.
4.3.5 Creating a Correlation Rule
1 Open the Correlation Rule Manager window and select a folder from the Folder drop-down list
to which this rule is added.
2 Click the Add button located on the top left corner of the screen.
86
Sentinel 6.1 Rapid Deployment User Guide
Advertisement
Table of Contents
