6 Event correlation

    Overview

    Displayed data:

    Mass editing options

    Buttons below the list offer some mass-editing options:

    • Disable - change the correlation rule status to Disabled

    To use these options, mark the checkboxes before the respective correlation rules, then click on the required button.

    Using filter

    The Filter link is available above the list of correlation rules. If you click on it, a filter becomes available where you can filter correlation rules by name and status.

    6 Event correlation - 图2