Product Documentation

Creating Rules

Last updated on 08 May, 2023

Rules control the automation of various processes in LM Dexda. For example, events that come into LM Dexda triggers a process to create alerts from the events. The process is governed and automated by a set of rules. Other examples of rules are to control the creation of incidents, the processing of correlations, and the closing alerts and incidents.

Rules can be of types interactive or automatic, and are associated with specific actions that are triggered. For more information about the concept of rules, see About Rules. For information about the action group concept, see About Action Groups.

The following descibes how to create or edit a rule, and the various parameters involved in the configuration.

Viewing Rules

Select Rules in the navigation bar to open the Rules page. This lists configured rules in your LM Dexda portal.

You can do the following when exploring rules:

  • Select the Filter icon to the right to filter the rules in the list, for example by type or creation time.
  • Select a column header to sort the listing.
  • Select the link to the associated Action Group for the rule, to see the configuration for the action group.
  • Select the arrow in the Filter column for a selected rule to see the filter output in code. This is useful for example when you..??

Working with Rules

Note: You neeed to have administrator permissions to edit, create, or delete rules.

You can do the following on the Rules page:

  • Edit the configuration of an existing rule. Select the link in the Name column. Or, select the menu to the right in the table row and select “Edit”.
  • Create a new rule based on an existing one. Select the menu to the right in the table row and select “Clone”.
  • Create a new rule from scratch. Select Edit rules in the upper right, and select Create rule in the left panel. This opens an empty configuration form in the right panel where you can add configuration parameters.

See the following how to add configuration parameters.

Editing or Creating a Rule

The following describes the steps when editing or creating a rule. Note that available configuration parameters vary depending on the type of rule. For details about configuration parameters, see Configuration Parameters.

  1. Name (Required): Add a descriptive name for the rule, for example “Create Incident”.
  2. Description: Describe what the rule is used for.
  3. Type (Required): Select the rule type, “Interactive” or “Automatic”. Determines if the associated action group is triggered manually or automatically.
  4. Action Group (Required): Select the action group to associate with the rule. Available options here depend on the type of rule selected (interactive or automatic).
  5. Status: Set to “Enabled” when you want the rule to take effect. Set to “Disabled” to deactivate a rule so it will not be applied.
  6. Additional Inputs: Set to “On” if the associated action should allow for execution of extra records. If set to “Off”, only the records…are allowed. ?? Can only be added for rules associated with a manual action (type “Interactive”).
  7. Overrides: Select the rule which will override the default if it also matches the condition. Can only be added for rules associated with an automatic action (type “Automatic”).
  8. Frequency: Determines how often and when the action can be executed. Add a duration, an operator, and a threshold value…??
  9. Group By: Fields entered here will be used to build an aggregation key, for example to group by customer ID.
  10. Continue by adding configuration as needed under the Filter, Additional inputs, and Parameters tabs.
  11. Filter: Apply a filter to set the condition for the rule. Select Add expression to chose a field, available options depend on the input type for the associated action group. Select an operator, enter a value, and select Add. Select And or Or to add more conditions if desired.


  12. Additional Inputs: Select Add expression to apply a filter condition to be executed when …? Can only be added for rules associated with a manual action (type “Interactive”).


  13. Parameters: You can assign Message parameters to corresponding parameters for the executed action. Select a parameter and provide input in text format…??

  14. When done, select Save to add the rule.

Note: You activate the rule by setting the Status to “Enabled”.

Configuration Parameters

Available options for configuration parameters depend on the combination of selected rule type and action group. For a description of configuration parameters, see About Filters.

Deleting Rules

Can you delete a rule and if yes, what are the consequences…??

Example

This is an example of the setup for a rule controlling the process for manually assigning an insight from the LM Dexda dashboard. The rule is associated with an “Assign Insight” action group defining the process flow when the rule is applied. The rule is triggered whenever there is an escalation (state of the workflow for an alert) with state “new”.

Name: Assign to me
Description: Assign and insight to the user
Type: Interactive
Action Group: Assign Insight
Status: Enabled
Additional Inputs: Off
Filter: Escalation Equals new
In This Article