Customize the Knowledge Base › Implement Changes › Change a Rule Literal Value › Changing a Rule Value

Changing a Rule Value

An example of what you would include in your MYRULES.VPR to effect this change follows:

DISABLE I0180;

Literal TD_HIGH_ERASE_IO = 0.1 EndLiteral

Rule UI180
 Split_io_rate .lt. td_high_split_io;
 Window_turn_rate .lt. td_high_turn_rate;
 Erase_QIO_rate .ge. td_high_erase_io;
 Occurrences = td_io;

Evidence =
 Erase_QIO_rate
 Time;

Conclusion
"Security erasures (as measured by Erase I/Os) have exceeded
threshold. These I/Os may be generated on a per-file basis
by the use of $DELETE /ERASE or $PURGE /ERASE. They may also
be generated on a per-volume basis through the use of
$SET VOLUME /ERASE_ON_DELETE or by *NOT* turning off the
HIGHWATER_MARKING attribute, which OpenVMS enables by 
default for all volumes."

Brief_conclusion
"Security erasures detected; disable if not necessary."

EndRule

In the previous example, the conditions and evidence were copied from the factory rules source file, while the conclusion and brief conclusion were copied from the message text file.