Alerting: Rule Syntax Dialog

Document created by RSA Information Design and Development Employee on Apr 22, 2016
Version 1Show Document
  • View in full screen mode

This topic describes the features of the Rule Syntax dialog. The Rule Syntax dialog displays the EPL syntax of conditions, statements, and debugging parameters, and provides a warning when the syntax is invalid.

To access this dialog:

  1. In the Security Analytics menu, select Alerts > Configure.
  2. In the Rule Library view, do one of the following:
    a. Click Actions menu cropped and select Advanced EPL or Rule Builder.
    b. Double-click an existing rule.
    c. Select an existing rule and click Edit.png in the Rule Library toolbar.
    d. In the row of an existing rule, select Actions menu cropped> Edit.
    The new or existing rule is displayed in a new tab, available to edit.
  3. Click Show Syntax at the bottom of the tab.

The following figure is an example of the Rule Syntax dialog.



The following table describes the Rule Syntax dialog parameters.

Rule is valid or Validation error in ruleIndicates whether the rule syntax is valid or needs to be changed.
Rule NameDisplays the name of the rule.
TextDisplays the EPL syntax of conditions, statements, and debugging parameters if the rule is valid.
You are here: References > Rule Syntax Dialog