> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/manage-correlation-rules.md).

# Manage correlation rules

View and manage your correlation rules in **Detection Rules** → **Correlation Rules**. To manage a Correlation Rule, right-click the Correlation Rule and select an action.

You can also monitor your correlation rule executions with the `correlations_auditing` data set. For more information, see [Monitor correlation rules](/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/monitor-correlation-rules.md).

<details>

<summary>Right-click actions for managing correlation rules</summary>

* **View related alerts:** View the alerts generated by this correlation rule in the **Alerts** page. You can **Show alerts in new tab** or **Show alerts in same tab**.
* **Open in XQL:** View the XQL results for the correlation rule in XQL Search. You can **Show results in new tab** or **Show results in same tab**.
* **Execute Rule:** Run the rule now without waiting for the scheduled time.
* **Preview Rule:** View the rule before it's executed.
* **Save as new:** Duplicate the correlation rule and save it as a new correlation rule.
* **Export:** Select one or more rules to export to a JSON file.
* **Disable** the selected correlation rule. This option is only available on an active rule.
* **Enable** the selected correlation rule. This option is only available on an inactive rule.
* **Edit Rule**: Edit the rule parameters configured in the **Edit Correlation Rule** editor.
* **Delete** the correlation rule.
* **Copy entire row** to copy the text from all the fields in a row of a correlation rule.
* **Show rows with ‘\<field value>’** to filter the correlation rules list to only display the correlation rules with a specific field value that you select in the table. On certain fields that are null, this option does not display.
* **Hide rows with ‘\<Rule Description>’:** Filter the correlation rules list to hide the correlation cules with a specific field value that you select in the table. On certain fields that are null, this option does not display.

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/detect-threats-and-analyze-data/detection-rules/whats-a-correlation-rule/manage-correlation-rules.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
