Rules | Discovery | Create#

Create a discovery rule to add matched entities to the the Discovery overview.

  1. From the left navigation, select + Create > Rules Rules > Discovery rule.

  2. Select whether you would like to set up a Discovery rule based on a Search query or a Keyword watchlist.

  3. Enter a name for the Discovery rule.

  4. (Optional) Enter a short Description of this Discovery rule.

  5. (Optional) Select Enabled if you’d like this rule to be run immediately after saving.

    • If you decided to base this Discovery rule on a Search query, craft a search query

    • If you decided to base this Discovery rule on a Keyword watchlist, enter keywords separated with commas, semicolons, enters, or tabs. The list will be run deduplicated and is case-insensitive.

  7. (Optional) Select one or more Correlated workspaces or one or more Correlated workspace types

  8. Select Save.

Result#

When run, this rule will:

  1. match entities that:

    • were returned by the query you crafted,
      or

    • contain a keyword you added to the watchlist,
      and (if you selected Correlated workspaces or types)

    • have direct or indirect relations to objects that are in a workspace that you selected or in a workspace of a type that you selected.

  2. and add them to the the discovery index.