States are the highest logic level of a CAE rule and have a larger number of required fields.
This field defines how long
CylanceOPTICSwill wait for events to trigger the event. The recommended default value is -0:00:00:001.
This field defines whether
CylanceOPTICSshould record the events that satisfy a state. The recommended value is true.
This field defines the name of the state that will be displayed in the UI if the rule is satisfied.
This field defines the scope in which
CylanceOPTICSlooks for relevant events. In most cases, the recommended value is global.
This field contains a list of one or more state objects. These objects can be chained.