Working with expressions

EDD rules contain sets of expressions that are used by Endpoint Data Discovery (EDD) policies to detect confidential and at-risk file content stored on the hard drives of your devices.

An expression can be a single word or phrase, such as "account number", or it can include a combination of words, variables, operators, and special characters. When you add an expression to an expression set, you need to use the correct syntax.

To add an expression to an expression set:

  1. On the EDD Rules sidebar, click the rule that you want to edit. The rule opens in the work area.
  2. If the work area is grayed out, the rule is currently used in one or more EDD policies. Click Edit Rule to enable the work area.
  1. Click the icon next to the name of the expression set that you want to edit. The expression set expands.
  2. Click Add Expression. A new row is added to the expression set.
  3. Enter the expression using supported syntax. If Syntax error shows after you click away from the expression field, the syntax is not supported. You need to correct the expression's syntax before you can publish your rule.
  4. In the field below the expression, enter additional information to describe the expression, if desired.
  5. To ensure that the expression is yielding the desired results, test your expression.
  6. If you're finished building the rule and you want to make it available for selection in the Configure EDD dialog, publish it.

To edit an expression:

  1. On the EDD Rules sidebar, click the rule that you want to edit. The rule opens in the work area.
  2. If the work area is grayed out, the rule is currently used in one or more EDD policies. Click Edit Rule to enable the work area.
  1. Click the icon next to the name of the expression set that you want to edit. The expression set expands.
  2. Click the expression that you want to edit. The expression is now editable.
  3. Update the expression text using supported syntax. If Syntax error shows after you click away from the expression field, the syntax is not supported. You need to correct the expression's syntax before you can publish your rule.
  4. In the field below the expression, update the comment associated with the expression, if applicable.
  5. To ensure that the expression is yielding the desired results, test your expression.
  6. If you're finished editing the rule and you want to make it available for selection on the Configure EDD dialog, publish it.

You can delete an expression from a rule's expression set.

To delete an expression:

  1. On the EDD Rules sidebar, click the rule that you want to edit. The rule opens in the work area.
  2. If the work area is grayed out, the rule is currently used in one or more EDD policies. Click Edit Rule to enable the work area.
  1. Click the icon next to the name of the expression set that contains the expression you want to delete. The expression set expands.
  2. Click the icon next to the expression that you want to delete. The expression is removed from the expression set.
  3. Optionally publish your changes to the rule.
Related Topics Link IconRelated Topics