Edit Sorting Properties for System Base MPE Rules
- On the Tools menu, click Knowledge, and then click MPE Rule Builder.
The Rule Builder window appears. On the main toolbar, click the folder icon in the icon bar.
The Rule Browser opens.Select a Log Source Type from the list on the left side of the window.
On the Rule Browser menu, click Edit, and then click Edit Base-rule Sorting.
When the Rule Validation dialog box appears, click OK.
The Rule Sorter window appears for the selected Log Source type. The following apply to the Rule Sorter window:All rules appear in the grid from top to bottom in ascending order by sort order.
Clicking one of the arrows on the left changes the static ordering by moving the selected row(s) up or down in the list.
Only rules that have the Auto-Sort checked may also have values in the Sort Above lists.
Toggling the value of the Auto-Sort check box for a rule causes its Custom Sort Above value to be cleared.
Clicking any Sort Above cell on a manually sorted rule has no effect.
The Sort Above System check box and Custom Sort Above columns are never enabled for System rules.
Click the Custom Sort Above cell on an auto-sorted rule to open the Sort Above List window.
Select the Base Rules you want to sort above the rule selected in the Rule Sorter.
Click OK. The selected Base Rules appears in the Custom Sort Above cell by MPERuleRegexID.