You can include one or more rules and/or rule sets in a log file monitor. When you add a rule, you must also select search criteria and then associate it with severity and alert information to fully define the rule.