Table of Contents

Search

  1. Preface
  2. RulePoint
  3. RulePoint Concepts
  4. Using RulePoint
  5. RulePoint Objects
  6. Working with Topics
  7. Working with Connections
  8. Working with Sources
  9. Working with Responders
  10. Working with Responses
  11. Working with Watchlists
  12. Working with Analytics
  13. DRQL
  14. Working with Rules
  15. Working with Alerts
  16. Setting Access Controls
  17. Troubleshooting RulePoint Issues
  18. Connecting to an Ultra Messaging Application
  19. Creating an Ultra Messaging JMS Source

User Guide

User Guide

Conditions

Conditions

The condition of a rule is where most of the event processing occurs. It is here where you can define the criteria for matching events on their names, values such as price, temperature, volume, amount, their relation to other events for example, if Name from Criminal List equals Name from Employee List, and other conditions.
You can create granular, specific, and complex condition statements that are flexible enough to meet your business requirements for event analysis.
For example, the following rules scan incoming events for a drop in any stock’s daily volume and in any watchlisted stock’s volume within five minutes:
  • Rule 1: If you see one stock volume that is greater than 30,000 for the day, then add the stock to the Stock watchlist.
  • Rule 2: If you see two stock share prices drop by more than 10% in a 5 minute window and the stock is on the Stock watchlist, then notify the Fraud Team.

0 COMMENTS

We’d like to hear from you!