Skip to content

Commit e7f5908

Browse files
clementgbcnclaude
andauthored
Add <= to Cloud SIEM supported rule condition operators (#37933)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent c3f825a commit e7f5908

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

layouts/shortcodes/cloud_siem/set_conditions_then_operator.en.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
1. In the **Set severity to** dropdown menu, select the appropriate severity level (`INFO`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`).
66
1. If you are creating a **Simple condition**, enter the condition when a signal should be created. If you are creating a **Then condition**, enter the conditions required for a signal to be generated.
77
- All rule conditions are evaluated as conditional statements. Thus, the order of the conditions affects which notifications are sent because the first condition to match generates the signal. Click and drag your rule conditions to change their order.
8-
- A rule condition contains logical operations (`>`, `>=`, `<`, `&&`, `||`) to determine if a signal should be generated based on the event counts in the previously defined queries.
8+
- A rule condition contains logical operations (`>`, `>=`, `<`, `<=`, `&&`, `||`) to determine if a signal should be generated based on the event counts in the previously defined queries.
99
- The ASCII lowercase query labels are referenced in this section. An example rule condition for query `a` is `a > 3`.
1010
- **Note**: The query label must precede the operator. For example, `a > 3` is allowed; `3 < a` is not allowed.
1111
1. In the **Add notify** section, click **Add Recipient** to optionally configure [notification targets][101].

layouts/shortcodes/cloud_siem/set_conditions_threshold.en.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
1. In the **Set severity to** dropdown menu, select the appropriate severity level (`INFO`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`).
88
1. If you are creating a **Simple condition**, enter the condition when a signal should be created. If you are creating a **Then condition**, enter the conditions required for a signal to be generated.
99
- All rule conditions are evaluated as condition statements. Thus, the order of the conditions affects which notifications are sent because the first condition to match generates the signal. Click and drag your rule conditions to change their order.
10-
- A rule condition contains logical operations (`>`, `>=`, `<`, `&&`, `||`) to determine if a signal should be generated based on the event counts in the previously defined queries.
10+
- A rule condition contains logical operations (`>`, `>=`, `<`, `<=`, `&&`, `||`) to determine if a signal should be generated based on the event counts in the previously defined queries.
1111
- The ASCII lowercase query labels are referenced in this section. An example rule condition for query `a` is `a > 3`.
1212
- **Note**: The query label must precede the operator. For example, `a > 3` is allowed; `3 < a` is not allowed.
1313
1. (Optional) In the **Add notify** section, click **Add Recipient** to configure [notification targets][101].

0 commit comments

Comments
 (0)