On a deployment with rules, you can edit and delete rules to customize the deployment. Each of the following procedures starts in the Rules tab.
Edit a Rule
- In the Security Analytics menu, select Alerts > Configure > Rules.
The Rules tab is displayed.
- In the options panel, under Deployments, select a deployment.
- In the ESA Rules panel, double-click a rule to open it in a new Security Analytics tab.
- Modify the rule, then click Apply.
The rule is saved.