Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Highlighted
yao Absent Member.
Absent Member.
216 views

How to confirm Action sequence in a rule ?


Hi,

ON Page 412 of ESM_ArcSightConsole_UserGuide_6.5c.pdf, it is said

"Note that the Editor display does not always match the internal representation of the specified order of rule actions."

So haw can we confirm Action sequence in a rule ? What can we do if the people who created the rule forgot the order he added actions?

Thanks

Jun Yao

Labels (2)
0 Likes
Reply
4 Replies
yao Absent Member.
Absent Member.

Re: How to confirm Action sequence in a rule ?

Hi,

ON Page 412 of ESM_ArcSightConsole_UserGuide_6.5c.pdf, it is also said

"After you click Apply, the display reorders the actions ......."

We added a lot of  actions in to a rule, but after we click Apply, the display did not reorder the actions.

We used a Japanese ESM 6.5c . The name of the action all are in Japanese.

Thanks

0 Likes
Reply
sparky1 Absent Member.
Absent Member.

Re: How to confirm Action sequence in a rule ?

Not tested in 6.5 but in 5.2 when you click save it does not re-order.

They also introduced in 5.2 the capability to move conditions up and down, so that you could re-order them.

The manager processes from the top down, hence always apply the most restrictive conditions at the top of the rule.

0 Likes
Reply
michael.selph Absent Member.
Absent Member.

Re: How to confirm Action sequence in a rule ?

Were any of the actions "Add to Active List"? The way I read the documentation is that you can read the rule actions top down and that will be the order that they are performed in. With the exception of 'Add to Active List' which will always be re-ordered to the top on apply. It moving to the top does not affect the internal order of the actions.

Because not changing the order on apply would be to straight forward

-Mike

0 Likes
Reply
yao Absent Member.
Absent Member.

Re: How to confirm Action sequence in a rule ?

Hi Johnston and Selph

Thank you for your reply.

We tested this on ESM 6.5c(Japanese version) and did not observe Editor display  re-order the actions. The actions included "Add to Active List", of course the title of "Add to Active List" action is in Japanese.

Thanks

0 Likes
Reply
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.