4.5 Associating Actions to a Rule

You can configure one or more actions to a rule. The associated actions are executed when the rule fires.

  1. Launch the Correlation interface.

    For more information, see Section 4.2, Accessing the Correlation User Interface.

  2. In the Correlation panel, click any rule to which you want to associate actions, then click .

    The Correlation Rule Builder is displayed.

  3. In the Actions panel, click to associate one or more actions to the rule.

    The list of actions is displayed.

  4. Select the actions that you want to associate with the rule, then click OK.

  5. Click to define when the action should execute.

  6. Select one of the following:

    • Perform actions every time the rule fires: The action executes each time the rule criteria are met.

    • Perform actions at most every: The action executes at most every specified time interval. By default, this option is selected and the time interval is set to 1 hour. This is to ensure that rule does not fire continually and overutilize resources.

  7. Click OK.

  8. Click Save Rule.

NOTE:If you modified a deployed rule, you must redeploy the rule in the Correlation Engine for the changes to take effect. For information on deploying a rule, see Section 4.8, Deploying Rules in the Correlation Engine.