Alerting: Build a Statement Dialog

Document created by RSA Information Design and Development on Jul 26, 2016Last modified by RSA Information Design and Development on Jul 26, 2016
Version 2Show Document
  • View in full screen mode
 

The Build a Statement dialog allows you to construct a condition statement when creating a new Rule Builder rule.

To access the Build a Statement dialog:

  1. In the {{SA}} menu, select Alerts > Configure.
    The Configure view is displayed with the Rules tab open.
  2. In the Rule Library toolbar, select Add drop-down > Rule Builder.
    A New Rule tab is displayed in Security Analytics.
  3. In the Conditions toolbar, click Add icon.
    The Build a Statement dialog is displayed.

BldStmnt.png

Features

The following table describes the parameters in the Build a Statement dialog.

                                           
ParameterDescription
NamePurpose of the statement.
SelectConditions the rule requires. There are two options:
  • If all conditions are met
  • If any of these conditions are met
Meta KeyMeta key for ESA to check in the rule statement.
Evaluation TypeRelationship between the meta key and value for the key:
  • is
  • is not
  • contains
  • not contains
  • begins with
  • ends with
ValueValue for ESA to look for in the meta key.
Is Value An Array?Choice to indicate if contents of Value field represent one value or multiple values:
  • No indicates one value.
  • Yes indicates multiple values.
Add iconAdd a statement.
Delete selected statement.
SaveAdd statement to the Conditions section of the Rule Builder tab.
You are here: References > Build a Statement Dialog

Attachments

    Outcomes