Edit entity rules

To edit an existing entity, observable, enrichment, or discovery rule:

  1. In the left navigation bar, go to Data configuration images/download/attachments/82474923/robot.svg-x24.png > Rules > Entity.

  2. Select a rule to edit.

  3. In the rule detail pane, click the menu icon , and from the drop-down menu select Edit.
    The rule editor is displayed, and you can modify the selected rule.

  4. Enter your changes as needed.

  5. To store your changes, click Save; to discard them, click Cancel.

Alternatively:

  1. In the Rules view, browse to the rule you want to edit, and then click the menu icon .

  2. From the drop-down menu select Edit.
    The rule editor is displayed, and you can modify the selected rule.

  3. Enter your changes as needed.

  4. To store your changes, click Save; to discard them, click Cancel.