Severity in EPL Rules

[RenatoGoncalves]

Hello,

Me and my colleague Tiago Cardoso‌ are looking to understant if tge severity ( 0-10 ) on te alerts can be edited directly in the rules by changing the EPL written to create the rule.

[LeeKirkpatrick]

Hey Renato,

You can not directly edit that specific severity within the EPL itself, but you could add a custom severity to the output of the EPL like so:

SELECT *, 1 as mySeverity FROM Event

Cheers,

Lee