Bring threat intelligence from Sixgill using TAXII Data Connector

If we import threat intelligence from multiple sources like Anomali and Sixgill, and we activate rules in Sentinel to generate incidents, will the rules correlate URLs and IPs in events with all the TI-sources automatically, or do we need to create a separate rule for each threat intelligence source?