Lead rules can be created by administrators at Admin -> Lead Rules.
The steps are below:
- Give the lead a human friendly name.
- Select the product (if any) that sent the lead.
- Assign behaviors to client, server, file and user that are indicated in the artifact.
- Build artifact criteria using the same syntax as artifact searches. This can be tested for matches on the Artifact page.
- Hit save
Note processing can take up to 10 minutes to begin processing using the new lead rule.