Creating and Editing Event Rules

You can create a new event rule by copying and modifying the settings of an existing rule or by creating the rule from scratch.

In either case, you must provide at least the non-optional information present in bold in the left column:

General Description	Section in theAdd/Edit Event Rule Page
If a file- or computer-related event matches this/these criteria...	Select Event Properties
...and a file referenced in the event matches this/these criteria (optional)...	Select File Properties
...and the process referenced in the event matches this/these criteria (optional)...	Select Process Properties
... then take the following action...	Select Action
... on computers in this/these policy(ies)...	Select Action/Create For:

The Select Event Properties, Select File Properties, and Select Process Properties sections can include multiple criteria for triggering the rule. The Select Action section has different fields depending on the action you choose.