The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Create a rule from a search query

Prev Next

You can create a rule from a search query when the search syntax is valid from the search results table, saved search page, or search activity page. You can also create a rule from a search query without running the search.

To create a rule from a search query:

  1. From the Main Menu Helix_MegaMenu.png, select Search and do one of the following:

    • Enter a valid search query, and beside the search button select More Options more-options.png > Create Rule from Query.

    • Select Search Activity or Saved Search, locate the search and at the end of the row select More Options more-options.png > Create Rule from Query.

  2. If you are a federated customer, select the tenant you want to create the rule for. The new rule opens in a new tab. Make any changes you want and click Save.