This section describes how to create continuous search-based Alarm rules.
For example, if your company prohibits employees from using Dropbox, you can create a rule by first performing a query on Application:Dropbox, and then saving that query data for the rule parameters. Once the rule is saved, any Dropbox activity on the network triggers an Alarm.
NetMon also sends any triggered alarms to LogRhythm Enterprise.
