It might not be possible to achieve what you want directly with correlation rules, but you can trigger an automation script for every alarm update using correlation rules, and then check every time whether your DMA is in the RED, YELLOW or GREEN state.

I think the easiest way to achieve that is to make a separate view for each DMA with the elements it is hosting. Then, you can check the alarm level of the view in the automation script as follows.

public ViewStateEventMessage GetViewState(Engine engine, IDmsView view)
{
   var msg = new GetViewStateMessage()
  {
    ViewID = view.Id,
  };
  var resp = engine.SendSLNetSingleResponseMessage(msg);
  if (resp is GetViewStateResponse stateResponse)
    return stateResponse.States.FirstOrDefault();

  return null;
}

/// <summary>
/// The Script entry point.
/// </summary>
/// <param name="engine">Link with SLAutomation process.</param>
public void Run(Engine engine)
{
  var dms = engine.GetDms();
  var view = dms.GetView("YOUR_DMA_VIEW");
  var viewState = GetViewState(engine, view);
  if (viewState != null)
  {
    if (viewState.Level == Skyline.DataMiner.Net.Messages.AlarmLevel.Critical)
    {
      //Red
    }
    else if (viewState.Level == Skyline.DataMiner.Net.Messages.AlarmLevel.Major || viewState.Level == Skyline.DataMiner.Net.Messages.AlarmLevel.Minor ||
                viewState.Level == Skyline.DataMiner.Net.Messages.AlarmLevel.Warning)
    {
      //Yellow
    }
    else if (viewState.Level == Skyline.DataMiner.Net.Messages.AlarmLevel.Normal || viewState.Level == Skyline.DataMiner.Net.Messages.AlarmLevel.Masked)
    {
      //Green
    }
  }
}

As you can see, I use an SLNet message to fetch the alarm state of the view, as it is not yet available as an automation call as far as I know.