Table of Contents

Search

  1. Preface
  2. RulePoint
  3. RulePoint Concepts
  4. Using RulePoint
  5. RulePoint Objects
  6. Working with Topics
  7. Working with Connections
  8. Working with Sources
  9. Working with Responders
  10. Working with Responses
  11. Working with Watchlists
  12. Working with Analytics
  13. DRQL
  14. Working with Rules
  15. Working with Alerts
  16. Setting Access Controls
  17. Troubleshooting RulePoint Issues
  18. Connecting to an Ultra Messaging Application
  19. Creating an Ultra Messaging JMS Source

User Guide

User Guide

Topic Overview

Topic Overview

The topic of a rule describes the types and properties of events coming into the system, and how to pre-filter these events. Topics are logical groupings of events that enable users to manage multiple event sources by funneling them into one grouping. You can reference the topic(s) in your rules.
You create rules to look for events by referencing a topic that enables you to group similar event sources within RulePoint. You can write a rule to look at a single event or multiple events with a single property or multiple properties that relate to a single topic or multiple topics.
RulePoint supports pre-filtering in the topic section, which means that you can provide simple, initial filtering before defining the conditions of the rule. For example, if your business process is to look at three events within five minutes, you can write the topic section to wait for these three events before sending the results to the condition section for further processing. If three or more events do not occur during any five-minute minute window, RulePoint will not continue to process the rule.
For example, the following rules scan incoming events to identify one stock volume event and two stock share price events:
  • Rule 1: If you identify one stock volume that is greater than 30,000 for the day, then add the stock to the stock watchlist.
  • Rule 2: If you identify two stock share prices drop by more than 10% in a five minutes window and the stock is on the stock watchlist, then notify the Fraud Team.
Each topic specifies the default expiration time frame for events categorized into it. Only an administrator or the creator of the topic can change the default expiration time frame of the topic.
The names of the topic and its related property names in rules are not case-sensitive.

Example

Topics categorize events and their properties. When RulePoint receives an event, RulePoint identifies its properties and values and categorizes it under a specific topic.
A world news event will be categorized with the News topic, which can be defined with the heading, URL, full story text, and date and time properties. The topic picks up each of these properties and their values and displays them with the event.
The following table lists examples of topics and their related properties that a RulePoint user might up:
Topic
Properties
Stock Quotes
price, symbol, date/time, and financial index
Call Center
location, date/time, representative, activity
Community News
date/time, location, title, full story text, URL
Weather News
date/time, location, title, full story text, URL
Bank Transactions
bank name, date/time, activity
World News
date/time, title, full story text, URL
Business News
date/time, title, full story text, URL
Security Gate
date/time, location, license plate number, license plate state
Network and Server
server name, network IP, date/time, location
Credit Card Transactions
credit card type, balance, credit limit, date/time, limit

0 COMMENTS

We’d like to hear from you!