User guide

iGuard/inSight User Guide
Release 7.0.0.4
115
To view any incidents that are generated by the rule, go to Monitor and Group by Rule. When you find a
matching incident, you can verify that it is returned from the BLOGPOST_DEADSPIN concept by selecting it
and clicking on the Concept tab.
What are Templates?
Templates are used to save keystrokes when searching, adding rules or creating capture filters.
They contain collections of elements that would otherwise have to be typed in repetitively.
You may want to use one of the many standard templates already available, or you may want to
create your own.
Best practice: Use custom concepts with customized templates to create powerful but easy-to-
use queries, rules, and capture filters.
Templates are especially useful when building rules. They cut down on the repetitive typing needed
when experimenting with queries before saving a search as a rule.
Standard Templates
Reconnex has made a collection of templates available to expedite searches and assist in the
construction of rules, concepts and capture filters.
For example, when you search using a template, you can click on the "?" at the end of the dialog
box and select a template from the popup list.
To see the list of templates that are available, go to Policies > Templates.