Resources to learn ESA advanced EPL rules

[NM]

Hello all,

I am interested in learning about EPL and how to create the rules. However I am finding it hard to locate useful resources to help guide me in learning and understanding it. We have some here which I review allot but having a guide to explain it would help allot. I find the RSA documentation not to be very detailed in it either.  

Can anyone help recommend some good sites, books or resources to better understand this area.  

Thanks allot

[jeffshurtliff]

Hi Neema,

I have moved this thread to the https://community.rsa.com/community/products/netwitness?sr=search&searchId=f2cafbad-b8ce-4f08-805a-a05f2d820daa&searchIndex=0‌ community so that you can get an answer to your question.

Thanks,

Jeff

[KhaledGamal]

Hi N.M,

You can check the free videos provided by RSA university:-

There is one talking about EPL rules which can help you.

I have also attached a PDF that has Esper language  that is used to create EPL rules explained.

Hope this helps!

Best regards

Khaled 

[NaushadKasu1]

There are also solution patterns that show real examples which I've found helpful in the past as reference material.   See link: EsperTech - Esper 

[pranavsankar1]

Hey ,

Please find the esper guide and Golden Rule presentation of RSA SA

Regards

Pranav

[Anonymous]

Sorry to dig up an old thread. I just found an updated link to the Esper solution patterns, the one above appears broken.
https://www.espertech.com/esper/solution-patterns/

Some real good solutions to common problems and I've learnt a bit about Esper as well.