000033036 - Helpful information for developing ESA rules in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Apr 17, 2019
Version 8Show Document
  • View in full screen mode

Article Content

Article Number000033036
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Event Stream Analysis (ESA)
RSA Version/Condition: 10.4.x, 10.5.x, 10.6.x, 11.x
TasksThe attached document contains hints, use cases and FAQs related to the development of statements using Esper’s event processing language (EPL) with Security Analytics ESA.

For recommendations on deployment of rules, please see the ESA Enablement Guide.