Rule Set filter
The Rule Set filter resolves two distinct requirements for a Rule Set:
- Filters events for the Rule Set to reduce the number of events with which each Rule in the Rule Set must be compared.
- Sets defaults for all Rules in the Rule Set. Currently, the default is limited to Criteria match rate threshold.
This section contains the following topics:
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*