8.5.2 Correlation Rules

Correlation rules are used to correlate and establish relationships between different events and help in deciding how these events get correlated and clubbed under the case of that particular case type.

The correlation rules provide:
  • Users can add and modify correlation rules.
  • It allows filtering and sorting rules based on the correlation name, status, and correlation required.