Alerting: Rule Syntax Dialog

Document created by RSA Information Design and Development on Jun 26, 2017Last modified by RSA Information Design and Development on Sep 14, 2017
Version 2Show Document
  • View in full screen mode
  

This topic describes the features of the Rule Syntax dialog. The Rule Syntax dialog displays the EPL syntax of conditions, statements, and debugging parameters, and provides a warning when the syntax is invalid.

To access this dialog:

  1. In the Security Analytics menu, select Alerts > Configure.
  2. In the Rule Library view, do one of the following:
    a. Click Actions menu cropped and select Advanced EPL or Rule Builder.
    b. Double-click an existing rule.
    c. Select an existing rule and click Edit.png in the Rule Library toolbar.
    d. In the row of an existing rule, select Actions menu cropped> Edit.
    The new or existing rule is displayed in a new tab, available to edit.
  3. Click Show Syntax at the bottom of the tab.

The following figure is an example of the Rule Syntax dialog.

BasRuleSynDg.png

Features

The following table describes the Rule Syntax dialog parameters.

                     
ParametersDescription
Rule is valid or Validation error in ruleIndicates whether the rule syntax is valid or needs to be changed.
Rule NameDisplays the name of the rule.
TextDisplays the EPL syntax of conditions, statements, and debugging parameters if the rule is valid.
Previous Topic:Deployment Panel
You are here
Table of Contents > References > Rule Syntax Dialog

Attachments

    Outcomes