John Hardin wrote:
On Fri, 9 Oct 2009, Marc Perkel wrote:

Starting to write some SA rules again. What is the syntax for a rule where it's true if two other rules are both true? Need a small example.

meta  NAME  (rule1 && rule2)

It's essentially Perl logical expression syntax, and basic math expression syntax if you want to count:

meta  NAME  rule1 && (rule2a + rule2b + rule2c + rule2d > 2)



Thanks John

Would this be valid?

meta  NAME  ((rule1 || rule2) && rule3)


Reply via email to