Application Discovery provides a
set of options and fields that help you to define a valid application template
rule. The rule you create governs discovery of the application that you have
defined. You can create rules that apply generally or specifically to a process,
user, or group.
Create an Aggregation Rule |
 |
An aggregation rule is one in which you
designate one or more characteristics in order to collect the associated process
or processes into an application that can be matched by Application Discovery.
The
following procedure assumes that you have opened an application template and
are ready to edit the Rules form.
To start,
select a radio button for the first type field that you want to add and click
the Add Rule button. In the example below, the first
type added is an And operator.
To
add a type within the And statement braces,
select a type, and click the Add Rule button aligned
with the dot (.) within the And statement.
In the example below, a User type is added
when the button is clicked.
The
result when the Add Rule button is clicked is as follows:
You
can add a new type after "User" within the original And statement
by clicking the Add Rule button at 
(below),
or you can add additional statements or types after the
original And statement by clicking the Add
Rule button at 
.
Continue
in this way until you have added all the types that you want in the rule.
Fill
in the empty values to complete the rule description for this template, and
click Apply. (You might need to scroll to the right
to see the Apply and Cancel buttons.)
For guidance on the values that work in each field, see Key to Application Template Values.
Aggregation Rule Examples
The
following images demonstrate several ways to construct an aggregation rule
in Application Discovery.
The following figure shows a
simple aggregation rule that collects processes by specified executable
path and command line argument.
The
following figure shows an aggregation of multiple processes by
specified executable path into one application.
The
following figure shows an aggregation of multiple processes
specified using regular expressions.
How
to Remove Types from the Aggregation Rule |
|
You might
want to remove types from a rule to correct it or refine it. To remove a type,
click the Del Rule button to the right of the type
field that you want to remove. To delete And or Or statements, click the Del AND or
the Del OR button to the right of the closing brace
for that statement.
This example shows which Del Rule button
to click to remove
the Group type within an And statement
and to
remove the entire And statement.
Printable version
