Skip to main content

Rule query limit : extend query lookback period in a business rule

A new field, 'query limit' has been introduced in the tenant configuration file to control the query limit for live Elastic search queries during rule execution. This field determines how far back in time a rule can search. The default limit is set to 30 days, but it can now be increased to a maximum of 1 year (365 days). However, this extended limit (beyond 30 days) should only be applied to tenants where we have a contractual agreement to process a low volume of transaction data. A low-volume tenant typically processes around 2,000 transactions per day, or around 60,000 transactions over a 90-day period. This configuration allows users to input a query period in the rule manager that exceeds the previous 30-day limit, based on the value set in the system settings. .

Comparing Aggregates

General Aggregate Comparisons

Compare Aggregates Across Different Periods

  • You can now compare one aggregate from one period against another aggregate from a different period, both within the maximum supported period of up to 30 days. This allows to detect unusual patterns over short-term periods.

Compare Aggregates Against Custom Values

  • Continue to build rules by comparing an aggregate from one period (up to 30 days) against a custom value, maintaining the straightforward rule-building process you are familiar with in version 1.0

Real-Time Transaction Comparisons

Compare Aggregates Against Latest Transaction Values

  • Introduce real-time monitoring by comparing an aggregate from one period against a value from the most recent transaction, enabling prompt detection.

Custom Aggregates and Arithmetic Expressions

Create and Combine Custom Aggregates

  • Gain more control by creating your own aggregates and combining them using simple arithmetic expressions.

For example, you can now express rules like Variable A / Variable B > Variable C, allowing for more nuanced rules.