Anda dapat membuat beberapa versi aturan. Dengan demikian, Anda dapat bereksperimen dengan logika aturan
untuk pemeriksaan data peristiwa yang lebih mendalam.
Untuk melihat versi aturan, buka Editor Aturan:
Pilih aturan.
Klik ikon menu aturan, lalu pilih Lihat Versi seperti yang ditunjukkan di bawah.
Opsi menu Lihat Versi
Tampilan versi aturan ditampilkan.
Dari tampilan ini, Anda dapat memilih salah satu versi aturan sebelumnya.
Versi aturan diberi label dengan waktu pembuatannya.
Tampilan ini memberi Anda sejumlah opsi:
SIMPAN SEBAGAI BARU—Menyimpan versi aturan yang saat ini ditampilkan sebagai aturan baru dan terpisah.
LIHAT DETEKSI—Menampilkan deteksi yang disimpan dengan versi aturan ini.
Catatan: Deteksi ini mungkin tidak berlaku saat ini, bergantung pada usia versi aturan.
JALANKAN UJI—Menguji versi aturan saat ini secara real time, sehingga Anda dapat menentukan efektivitas versi aturan ini.
Setelah Anda selesai memeriksa versi aturan yang dipilih, klik EXIT untuk kembali ke Editor Aturan.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-21 UTC."],[[["\u003cp\u003eMultiple versions of a rule can be created, allowing for experimentation and detailed analysis of event data.\u003c/p\u003e\n"],["\u003cp\u003eDetections are tied to the specific rule version that generated them, ensuring clear tracking of results.\u003c/p\u003e\n"],["\u003cp\u003eUsers can access and review previous rule versions through the "View Versions" option in the Rules Editor.\u003c/p\u003e\n"],["\u003cp\u003eEach rule version provides options to save as a new rule, view detections, or run a real-time test, all from the versions view page.\u003c/p\u003e\n"]]],[],null,["# View previous versions of a rule\n================================\n\nSupported in: \nGoogle secops [SIEM](/chronicle/docs/secops/google-secops-siem-toc)\n\nYou can create multiple versions of a rule. This lets you to experiment with your rule logic\nfor a more nuanced examination of your event data.\n| **Note:** Any detections made with a version of a rule remain with it. If you switch to a different version of a rule, the detections you view are associated with that version and that version only.\n| **Note:** Rules can create detections on existing data. During reprocessing of enriched events, a rule can create a detection on an event that was modified (enrichment reoccurred) or on an event that matches the logic of a new rule version.\n\nTo view the versions of a rule, navigate to the Rules Editor:\n\n1. Select a rule.\n2. Click the rule menu icon and select **View Versions** as shown below.\n\n\n **View Versions menu option**\n3. Rule versions view is displayed.\n\n From this view, you can select any of the previous versions of the rule.\n Rule versions are labeled with the time it was created.\n4. This view provides you with a number of options:\n\n - **SAVE AS NEW**---Saves the currently displayed version of the rule as a new and separate rule.\n - **VIEW DETECTIONS**---Display the detections stored with this version of the rule. Note: These detections might not be current depending on the age of the rule version.\n - **RUN TEST**---Test the current version of the rule in real time, enabling you to determine the effectiveness of this version of the rule.\n\n | **Note:** Detections found through the test are not saved.\n5. When you have finished examining the versions of the selected rule, click **EXIT** to return to the Rules Editor.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
Opsi menu Lihat Versi