Managing Source Rules

When you create a source rule and save it, the rule is initially disabled. This is shown in the Status column on the source rule list page.

You can enable or disable a source rule by selecting it and choosing the corresponding option from the Source Rules menu, shown in the following screenshot:

You can also see which source rules use a specific agent scope. The Analytics Agent does not collect the log data until the source rule is enabled and assigned to an Agent Scope with active Analytics Agents.