Refine rules

A Refine rule verifies the validity of incoming events and collects additional data for an event before it is sent through the remaining rule phases where further processing takes place. Refine rules collect additional data for an event when the following conditions are met:

  • Event slot values require additional processing (an example: normalizing a message or host name).
  • An event must be confirmed before it can be processed further. 
  • An external process is executed to confirm an event.

Any new data returned from the query must conform to the BAROC interface model for the event. Interface classes are stored in the Knowledge Base with the event classes.

Was this page helpful? Yes No Submitting... Thank you

Comments