Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Editing Building Blocks

 

You can edit any of the default building blocks to use it in multiple rules or to build complex rules or logic. You can save a group of tests as building blocks for use with rules.

For example, you can edit the BB:HostDefinition: Mail Servers building block to identify all mail servers in your deployment. Then, you can configure any rule to exclude your mail servers from the rule tests.

  1. Click the Offenses or Network Activity tab.
  2. Click Rules.
  3. From the Display list, select Building Blocks.
  4. Double-click the building block that you want to edit.
  5. Update the building block, as necessary.
  6. Click Next.
  7. Continue through the wizard.
  8. Click Finish.