Skip to content

Commit 33ea5a8

Browse files
committed
Updates to query examples
1 parent bef16cf commit 33ea5a8

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

docs/cse/rules/about-cse-rules.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -98,13 +98,13 @@ _index=sumologic_system_events _sourceCategory=cseRule
9898
```
9999

100100
You can set up this query for one or multiple rules, with one or multiple statuses.
101-
* To query for other rule types, replace `"templatedMatchRule.status"` with another rule type. For example:
102-
* `"templatedAggregationRule.status"`
103-
* `"templatedChainRule.status"`
104-
* `"templatedFirstSeenRule.status"`
105-
* `"templatedMatchRule.status"`
106-
* `"templatedOutlierRule.status"`
107-
* `"templatedThresholdRule.status"`
101+
* To query for other rule types, replace the `field` and `eventname` strings. For example:
102+
* `"templatedAggregationRule.status"` and `"TemplatedAggregationRuleUpdated"`
103+
* `"templatedChainRule.status"` and `"TemplatedChainRuleUpdated"`
104+
* `"templatedFirstSeenRule.status"` and `"TemplatedFirstSeenRuleUpdated"`
105+
* `"templatedMatchRule.status"` and `"TemplatedMatchRuleUpdated"`
106+
* `"templatedOutlierRule.status"` and `"TemplatedOutlierRuleUpdated"`
107+
* `"templatedThresholdRule.status"` and `"TemplatedThresholdRuleUpdated"`
108108
* To query for for other statuses, replace `Warning` in the example above with another status. For example:
109109
* `"Active"`
110110
* `"Degraded"`

0 commit comments

Comments
 (0)