Link correlators to a correlation rule

The Link correlators option is available for the created correlation rules.

To link correlators:

1. In the KUMA web interface → Resources → Correlation rules section, select the created correlation rule and click Link correlators.
2. This opens the Correlators window; in that window, select one or more correlators by selecting the check box next to them.
3. Click OK.

Correlators are linked to a correlation rule.

The rule is added to the end of the execution queue in each selected correlator. If you want to move the rule up in the execution queue, go to Resources → Correlators → <selected correlator> → Edit correlator → Correlation, select the check box next to the relevant rule and use the Move up or Move down buttons to reorder the rules as necessary.

Page top