Linking a correlation rule to a correlator

The Link to correlator option is available for created correlation rules.

To link a correlation rule to a correlator:

1. In the KUMA web interface, go to the Resources → Correlation rules section.
2. Select the check box next to the rule or rules that you want to link, and in the toolbar or menu (), click Link to service → Link to correlator.

   You can also link a correlation rule to a correlator when editing rule settings. To do this, click a rule, go to the Correlators tab, and click Link to service → Link to correlator.

3. This opens the Correlators window; in that window, select one or more correlators by selecting the check box next to them, and click OK.

The correlation rule is linked to the correlator.

The rule is added to the end of the execution queue in each selected correlator. If you want to move the rule up in the execution queue, go to Resources → Correlator → <selected correlator> → Edit correlator → Correlation, select the check box next to the relevant rule and use the Move up or Move down buttons to reorder the rules as necessary.

Page top