Hello,
Me and my colleague Tiago Cardoso are looking to understant if tge severity ( 0-10 ) on te alerts can be edited directly in the rules by changing the EPL written to create the rule.
Hello,
Me and my colleague Tiago Cardoso are looking to understant if tge severity ( 0-10 ) on te alerts can be edited directly in the rules by changing the EPL written to create the rule.
Hey Renato,
You can not directly edit that specific severity within the EPL itself, but you could add a custom severity to the output of the EPL like so:
SELECT *, 1 as mySeverity FROM Event
Cheers,
Lee