Rule Queries
The query that defines what an Analytic Rule detects, and how its columns become the content of a detection.
Tag: analytic
Rule Settings
What a rule declares about itself, whether its documentation is included in detections, and where its errors go.
Rule Execution
Execution schedules, how a scheduled rule works through time, and the history of what it has run.
Rule Notifications
Delivering detections to a feed or to people by email, and limiting how many notifications a rule can send.
Analytic Rules
Analytic Rules are queries that can be run against the data either as it is ingested or on a scheduled basis.
Detections
What a detection contains, how it is built from the rule’s query, and the XML written to a feed.
Duplicate Management
Suppressing detections that repeat something you have already been told.
Reports
Reports run a query on a schedule and deliver the results as a file, by email or to a feed.
Email Setup
Configuring the SMTP server that Stroom uses to send Analytic Rule and Report emails.
Streaming Rules
Rules that run against streams as they are processed rather than on a schedule.
Table Builder Rules
An experimental processing type that should not be used.