Rules

From Management > Advanced Features > Rules, an administrator can add, edit, or delete triggers and aggregation rules.

• Triggers: can be created after defining a correlation Blok. Triggers describe what action should be taken once a correlation Blok is triggered.
• Aggregation rules: can optimize the performance of aggregation search queries.