The condition of a rule is where most of the event processing occurs. It is here where you can define the criteria for matching events on their names, values such as price, temperature, volume, amount, their relation to other events for example, if Name from Criminal List equals Name from Employee List, and other conditions.
You can create granular, specific, and complex condition statements that are flexible enough to meet your business requirements for event analysis.
For example, the following rules scan incoming events for a drop in any stock’s daily volume and in any watchlisted stock’s volume within five minutes:
Rule 1: If you see one stock volume that is greater than 30,000 for the day, then add the stock to the Stock watchlist.
Rule 2: If you see two stock share prices drop by more than 10% in a 5 minute window and the stock is on the Stock watchlist, then notify the Fraud Team.