Kaspersky Next XDR Expert

Editing aggregation rules

If necessary, you can edit the aggregation rule.

To edit the aggregation rule:

1. In the main menu, go to Settings → Tenants.

   The tenant list opens. The list contains only the tenants to which you have at least the Read access right.

2. Click the name of the required tenant.

   The tenant's properties window opens.

3. Select the Settings tab, and then click Aggregation rules.
4. In the list of aggregation rules that opens, click the name of the aggregation rule that you want to edit.
5. In the Edit aggregation rule window that opens, edit the aggregation rule properties. For more details on the rule properties that you can edit, refer to Creating aggregation rules.
6. Click the Save button.
7. If you want to change the aggregation rule priority, in the list of aggregation rules, drag and drop the rule by clicking its name.

   The higher the rule is in the list of aggregation rules, the higher its priority.

The properties of the aggregation rule are modified and saved.