Product guide

Custom Rule Sets page
Displa
ys information about created rule sets
Table 5-9 Option definitions
Option Definition
Show Filter / Hide
Filter
Displays the Quick find feature.
T
ype a search term and click Apply to search all the rows that contain the text that
is in the name column. Click Clear to remove the search term from the Quick find
field.
Name of Custom
Rule Set
Shows the name of the rule set.
Actions
• Delete — R
emoves a selected rule set from the list.
• Duplicate — Uses the settings of the selected rule set as the basis for a new rule set.
• Edit — Opens the Edit Rule Set dialog box to change the name, description, and
rules for that rule set.
• New — Opens the New Rule Set dialog box to create a new custom rule set.
New Rule Set and Edit Rule Set dialog box
Create
a new rule set or change the rules used in a selected rule set that display in your queries and
reports on a per log source basis.
Table 5-10 Option definitions
Option Definition
General
The name of the rule, and an optional description of it.
Test
Displays the replacement text that will appear to the user in the query or report instead of
the text
string you type.
Type the test string, and click Show Match to populate the Matching string field and select the
matching rule.
Rules
Shows the list of rules that are in that rule set, their priority in the list, and the replacement
text that
appears in the query or report.
Actions
• Export Rule Set — Creates a file based on the data in the rule set that can be used to import
in to another rule set.
• Import Rule Set — Select the file for the rule set whose details you want to import.
• New — Create a new rule for that rule set. The rule is added to the top of the list.
If you select an individual rule in the rule set and click Actions, the following options are also
available depending on the rule's location in the Rules table:
• Add Above / Add Below — Opens the New rule dialog box and places a new rule above or below
the rule you selected.
• Delete — Removes the selected rule from the list. You cannot remove the default rule.
• Edit — Change the type of text and the replacement text of an existing rule.
Selecting multiple rules in the list and clicking Actions, allows y
ou to reset the priority of the
rules in the rule set or remove rules.
5
Log sources and log formats
R
ule sets
44
McAfee Content Security Reporter 1.0.0 Software Product Guide