Creating a Test in the Rule

In the Hawk Console, you can define test condition for the rules. The alerts are generated based on a predefined test condition. The test condition can be designed by using the rulebase and microagent variables.

Procedure

1.

In the Hawk Console, open the Hawk Agent page to which you want to create a test condition. For steps, see Viewing the Agent Details.

2.

In the Agent’s page, select the Rulebases tab. All the rulebases for the Hawk agent are displayed. For details, see Rulebases Tab.

3.

On the Rulebases tab, click the rulebase name which you want to edit.

All the rules in the rulebase are listed. For details, see Rule Details Page.

4.

Click the rule name to which you want to add the test condition.

All the test conditions in the rule are listed. For details, see Test Details Page.

5.

Under the Tests section, click Add Test.

6.

In the New Test window, define a test condition by using the test builder.

For details about the test condition builder elements, see Test Condition Builder Reference.

7.

(Optional) Click Advance Options to add extra conditions to the test.

For the list of Advance Options fields, see Test Condition Advance Options Fields.

8.

(Optional) Click Create and Add Action.

The New Action window opens to add an appropriate action for the rule if the test condition is true. For details, see Creating an Action for a Test Condition.

9.

Click Create Test.

On successful creation of the test condition, the New Test window closes.

Result

The new test condition is now listed on the Rule details page.

What to do Next

Create a new action for the test condition. For details, see Creating an Action for a Test Condition.