Processing Rule Properties, Criteria Tab
Allows you to specify event properties that you want this
processing rule to match. The fields are defined as follows:
- Match events from source
- Specifies that the rule matches events from the specified
source.
- with event ID
- Specifies that the rule matches events with the specified event
ID number.
- of type
- Specifies that the rule matches events of the specified type,
such as Success Audit or Information.
- with description
- Specifies that the rule matches events with the specified text
in the description field.
- Criteria description
- Specifies all criteria defined for the rule. This field is
read-only.
To specify more advanced rule criteria, click
Advanced.