Purpose

Use the DEFRULE command to setup a rule that defines a pattern that is to be used for comparing messages from monitored consoles and determining if there is a match. The DEFRULE command also defines an action that is associated with the rule. If conditions for the rule are met, the associated action is scheduled for processing.