I Use the Filter creator in the Monitoring section to build and trouble shoot filters and often take advantage of the feature to be able to send them directly to Ndepth. This works great and I think it would also be very helpful to be able to "Send to" the Rule creation section under Build. Seems like whenever I want to build a new custom alert, I test it out in the monitoring section and then have to try to rebuild it again as a rule and this new feature would make that easier.
↧