Question: qradar how to create a rule?
Answer: Creating rules based on events Such rules allow your QRadar to correlate fields with different kinds of data sources, corelate events with other events and identify certain regularities. To create a rule, you need: 1. Go to Offences – Rules – Actions – New Event Rule tab.