Working with Event Policies and Actions › Manual Event Policy Customization

Manual Event Policy Customization

When you require functionality for an event policy that the Event Policy dialog does not support, you can manually refine event policy files. Examples of situations that require manual event policy customization are as follows:

• Policies that require a combination of exclude and include filters
• Policies with an enrichment action that requires complex querying and enrichment assignments, involving operations such as SQL joins
• Policies that require more than three distinct search patterns
• Enrichment policies that are conditional based on the presence of certain event values

Unless one of these situations or unsupported use cases occurs, use the functionality provided in the Event Policy dialog to define and deploy event policies.

To refine the event policy manually, edit or create the appropriate event policy files using the <Evaluate> policy operation and embedded Drools rules.

For information about how to define the <Evaluate> operations and Drools rules in event policy files, see Manually Refining Event Policy.