This topic describes the features of the Rule Syntax dialog. The Rule Syntax dialog displays the EPL syntax of conditions, statements, and debugging parameters, and provides a warning when the syntax is invalid.
To access this dialog:
- In the Security Analytics menu, select Alerts > Configure.
- In the Rule Library view, do one of the following:
a. Click and select Advanced EPL or Rule Builder.
b. Double-click an existing rule.
c. Select an existing rule and click in the Rule Library toolbar.
d. In the row of an existing rule, select > Edit.
The new or existing rule is displayed in a new tab, available to edit.
- Click Show Syntax at the bottom of the tab.
The following figure is an example of the Rule Syntax dialog.
The following table describes the Rule Syntax dialog parameters.