Correlation rules for JCorrelate can be obtained from JPort. However there is an easy way of generating the rules file on our own and JCorrelate is capable of consuming the same without any issues

A correlation rules file contains a the correlation rule name in one line and the regular expression in the very next line. The regular expression should have the left and the right boundaries of the value to be captured. There is no limit on the number of rules a correlation file can contain. This technique is very effective and gives more control to the end users on JCorrelate.

Below is a sample rules file for your reference.

Note : JCorrelate currently accepts only correlation files in the above format. Please write to us in case you would like to have additional features incorporated in our solutions. We are always open to suggestions to better enhance our tools.