Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 173

From the Elements panel, select an element and enter the parameter values to
Step 11
configure the element. See
The element is assigned to the selected object. This creates the first instance on
the Equation Editor.
Select another object from the Objects box and assign an associated element.
Step 12
By default, the objects are joined with the AND operator.
Continue selecting the objects and assigning elements until you have completed
Step 13
your equation. Click Save.
Note: If you wish to calculate two values before STRM adds the next consecutive
object, insert brackets around the values. For more information on operators, see
Editing the Operators.
You equation should resemble this window:
Table 8-22 Element Options
Parameter
Count Element Type
Name
Object
Parameter
Test
Value
Protocol Element Type
Table 8-22.
Description
Specify the element name.
Using the drop-down list box, select the targeted traffic flow. Options
include: Src (source), Dst (destination), Local, Remote, and Total.
Note: When ports are counted, the number of unique destination ports
is returned.
Using the drop-down list box, select the parameter you are testing.
Options include: Bytes, Packets, and ContentLength.
Using the drop-down list box, select how to test the numeric value.
Options include: Above, Below, and Equals.
Enter a numeric value for the option you have selected. The number of
bytes, number of packets or the content length. This value is based on
a flow stats record reported in a single interval.
Using the drop-down list box, select the byte size unit of measurement.
Options include: K (kilobyte), M (megabyte), G (gigabyte, and T
(terabyte). Click Add.
STRM Administration Guide
Managing Custom Views 165