Correlation rules file for JCorrelate can be obtained from JPort. However there is an easy way of creating the rules file on our own and JCorrelate is capable of consuming the same without any issues

A correlation rules file should be built in a JSON format as show in the below picture. It contains an array of regular expressions with the parameter names and its expressions. There is no limit on the number of rules a correlation file can contain. This technique is very effective and gives more control to the end users to use JCorrelate.