Appendix. Quick Reference

rule, description, when, then, and, or, in, regex, not_regex, true, false, score, reason

==, !=, >, >=, <, <=, in, regex, not_regex

block, review, allow, approve, deny, alert

count(), sum(), avg(), max(), min()

hour_of_day(), day_of_week(), day_of_month(), day_of_year(), month_of_year(), week_of_year(), year()

previous_transaction(within: "<duration>", match: { ... })

"PT30S", "PT15M", "PT1H", "PT24H", "P1D", "P7D", "P30D"

$variable_name, $current.field_name

Documentation Index