- play_arrow Overview
- play_arrow Administration
- Add Insights Nodes
- About the Alerts Settings Page
- Create a New Alert Setting
- Configure System Settings
- About the Identity Settings Page
- Add JIMS Configuration
- Edit and Delete an Identity Setting
- Configure Mitigation Settings
- About the Threat Intelligence Page
- Configure Threat Intelligence Source
- Edit and Delete Threat Intelligence Source
- About the ServiceNow Configuration Page
- About the Backup & Restore Page
- Create a Backup File and Restore the Configuration
- Download and Delete a Backup File
- play_arrow Monitor
- play_arrow Downloads
Edit and Delete Event Scoring Rules
You can edit and delete event rules from the Event Scoring Rules page.
Edit an Event Scoring Rule
To edit an event scoring rule:
- Select Configure > Insights > Event Scoring Rules.
The Event Scoring Rules page appears.
- Select the rule that you want to edit, and click the pencil
icon.
An edit page appears, displaying the same fields that were presented when you created a new rule.
- Modify the rule.
- Click Confirm to save your changes.
You are taken to the Event Scoring Rules page. A confirmation message appears, indicating the status of the edit operation.
Delete an Event Scoring Rule
To delete an event scoring rule:
- Select Configure > Insights > Event Scoring.
The Event Scoring Rules page appears.
- Select the rule that you want to delete, and click the
delete icon.
An alert message appears, asking you to confirm the delete operation.
- Click Yes to delete the rule.
A confirmation message appears, indicating the status of the delete operation.