Common Conditions Editor (CCE)

The ArcSight Console has a Boolean logic editor, which is also referred to as the Common Conditions Editor (CCE). If the criteria are met, the evaluation returns a Boolean true or false. All conditions constructed by the CCE are expressions that consist of a value or variable on the left, an operator (NOT, AND, OR), and a value on the right, for defining the conditions you use to help analyze resources such as filters, rules, and reports. This topic is your reference for using the CCE, wherever it appears.

Topics:

• Editor Features
• Condition Tree Command Buttons
• Condition Tree Context Menu Commands
• Adding Conditions
• Using Field Sets
• Adding or Removing Global Variables Using the CCE
• Testing for Zone Relevance

See also:

• Logical Operators for related information in creating conditions.
• Filtering Events, especially subtopics on Creating or Editing a Filter and Debugging Filters to Match Events.