.ws file must contain exactly one rule, and the rule’s name should be unique across the system.
The engine identifies rules by their name, which is used for logging, tracking, and debugging.
Structure
rule HighValueTransactionAlert { ... }: Defines the rule and its unique name.description: An optional but highly recommended string that explains the rule’s purpose. This is used for documentation and appears in monitoring tools.
.png?fit=max&auto=format&n=0JF6z69u57hmqsWm&q=85&s=531373acedba0eb783b669f6d558dfd8)