matchbehavior

Matches a behavior profile based on the key fields set in the behavior profile and adds the value field of the searched record to the output record.

Syntax

matchbehavior [OPTIONS] guid=PROFILE_GUID
Required Parameters
guid=PROFILE_GUID
GUID of behavior profile.
Optional Parameters
invert=t
boolean option to output the value field (default: f)
  • t: Outputs the records only if the reference key is not included in the behavior profile.
  • f: Outputs the records only if the reference key is included in the behavior profile.
verify=f
Boolean option to activate the validation for the behavior profile object at the query parsing stage (default: t).
  • t: validates the behavior profile object at the query parsing stage.
  • f: not validate the behavior profile object at the query parsing stage. This option prevents the system from issuing syntax errors at the policy synchronization stage.

Description

The matchbehavior command matches a behavior profile based on the key fields set in the behavior profile and adds the value field of the searched record to the output record. Only string or IP address types are allowed as key fields in the behavior profile. Other types are considered match failures. If the invert option is activated, the command returns output only if the behavior profile match based on the key field fails.

For the output fields, refer to the following table.

FieldTypeDescription
behavior_guidStringBehavior profile GUID
behavior_invertBooleanThe value of the invert option