NOTE:You must have the Manage correlation engine and rules permission to access the Correlation interface.
Log in to the Sentinel Main interface as a user with the Manage Correlation Engine and Rules permission.
https://<IP_Address/DNS_Sentinel_server:8443>/sentinel/views/main.html
IP_Address/DNS_Sentinel_server is the IP address or DNS name of the Sentinel server and 8443 is the default port for the Sentinel server.
In the navigation panel, click Correlation.
The Correlation panel is displayed. For more information, see Correlation Panel.
You can also access the Correlation user interface from the search results panel. For information on creating Correlation rules from the search results panel, see Creating Correlation Rules From Search Results.