How is it possible to navigate to the list of currently-enabled ES correlation searches?

Question

hamza reza · Accepted Answer

Configure -> Content Management -> Select Type “Correlation” and Status “Enabled”

hamza reza · Answer

Configure -> Correlation Searches -> Select Status “Enabled”

hamza reza · Answer

Settings -> Searches, Reports, and Alerts -> Filter by Name of “Correlation”

hamza reza · Answer

Settings -> Searches, Reports, and Alerts -> Select App of “SplunkEnterpriseSecuritySuite” and filter by “- Rule”

List of questions