You must declare conditionals and comparisons to ensure that you trigger actions only when necessary. Conditionals and comparisons help you filter event source output parameters.
To trigger an action when both comparisons are met, create And comparisons. And comparisons trigger rule actions when both comparisons evaluate as true.
The hierarchy of the tree graphically represents the order in which conditional and comparison expressions are evaluated. While the tree displays one conditional or comparison under the rule element, the And or Or might have numerous child elements. Rules that do not have conditional or comparison statements must have main code to trigger. For more information about the main code see, Understanding Main Code.
Rules that contain a comparison that is not a child element of an And or Or comparison is not a conditional comparison. These comparisons trigger actions when the event detection and alerting process evaluates the statement as true.
To edit comparisons or conditionals, right-click the rule you want to modify. To associate comparisons with a conditional, right-click the conditional, and then click Add Comparison. Comparisons are labeled with the output parameter name, equation, and value describing the comparison.
NOTE:When defining the Value property, enclose regular expressions with slashes (/) to indicate that the value is a regular expression.