Filter Events in a Stream
About This Task
You can use SAM to filter events in the stream. You accomplish this by using Rule processor, which translates rules into SQL queries that operate on the stream of data.
Steps
Drag the Rule processor to the canvas and connect it to the Join processors:
Double-click the Rule processor, click the + Add New Rules button, and create a new rule:
Click Ok to save the new rule.
Example
