Rules | Enrichment | Manage

Enabling or disabling rules

A rule must be enabled for it to take effect.

Enable rules

To enable a rule, do one of the following:

1. From the left sidebar, select Data configuration > Rules > Enrichment.

2. In the row of the rule you want to enable, select .

3. Select Enable.

Disable rules

1. From the left sidebar, select Data configuration > Rules > Enrichment.

2. In the row of the rule you want to disable, select .

3. Select Disable.

Edit rules

1. From the left sidebar, select Data configuration > Rules > Enrichment.

2. In the row of the rule you want to enable, select .

3. Select Edit.

4. Make the alterations you need and select Save.

Running Enrichment rules

Automatically run

Enrichers are automatically run either:

• against matching Entities that are ingested, created, or edited while the rule is enabled,

• against existing matching Entities that fall within the datascope you set.

• against both if you configured the Enrichment rule for both.

Entity versions

Only an edit that results in a new version of the Entity will trigger an enrichment rule run.

You cannot edit Observables. Editing an Observable’s relation to an Entity results in a new version of that Entity.

Manually run

To manually run the enrichers targetted by a rule:

1. From the left sidebar, select Data configuration > Rules > Enrichment.

2. In the row of the rule you want to run, select .

3. Select Run now.

Delete rules

1. From the left sidebar, select Data configuration > Rules > Enrichment.

2. In the row of the rule you want to enable, select .

3. Select Delete.

4. Confirm the deletion by selecting Delete.