. The Simulation
Details for this threshold set opens as a new tab. The Threshold Simulator is used to run selected scenario pipelines against the selected threshold sets to find the matches obtained from these combinations. These matches enable you to identify the events generated for the combination on a specified date. This can be helpful when you want to see which events would be generated with different threshold settings and be able to explain why your scenario is configured as it is, such as during audits.
To view simulator conditions for a threshold set, follow these steps:
1. In the Navigation List menu, select Pipeline Administration.
2. Select Threshold Manager. The All Threshold Sets page displays.
3. In the All Thresholds page, select the check box corresponding to the threshold set you want to view simulation details for.
4. Click Simulation History. The Simulation
Details for this threshold set opens as a new tab.
5. Click the Simulation Run ID for the simulation you want to view conditions for. The View Threshold Set pop-up window displays the details of this threshold set.
6. If you want to make modifications to these conditions, click Edit & Simulate . The Edit Threshold Set pop-up window displays. Follow the steps in Edit Simulator Conditions to make these changes.
To edit existing simulator conditions for a threshold set, follow these steps:
1. In the All Thresholds page, select the check box corresponding to the threshold set you want to edit.
2. Click Simulation History. The Simulation
Details for this threshold set opens as a new tab.
3. Select the check box corresponding to the Simulation Run ID for the simulation you want to edit.
4. Click Edit 
.
The Edit Simulator Conditions pop-up window displays.
Alternatively, you can access the Edit Simulator Conditions window by clicking Edit & Simulate in the View Simulator Conditions window.
5. If you want to make modifications to these conditions, update the following values:
§ Select one or more Jurisdictions for this threshold set using the drop-down list. Jurisdiction refers to the division of data in the database based on criteria such as geographical boundaries, legal entities, and so on.
§ Enter the Lookback Period for this threshold set. Lookback period refers to the number of seconds, minutes, hours, or days to lookback from the current date or time to create a time window which is used to consider cases for correlation.
§ Enter the Frequency Period for this threshold set. Frequency period refers to how frequently the scenario should be run.
§ Enter the values you want for this threshold set in the New Value field. Select the Batch Date as the date for the data you want to test the thresholds against. This can be the current date or a past date.
§ Enter the Data Origin.
6. Click Save & Simulate to run the modified simulation. After running a simulation, the Simulator History window displays the result with the number of event matches and details of each event. You can view the following details:
· Simulation ID: ID for this simulation run.
· Data Origin: Data Origin of the data set the simulated scenario conditions are run against.
· Jurisdiction: Jurisdiction the simulated scenario conditions are run for.
· Batch Date: Date the simulated scenario conditions are run for.
· Results: Number of event matches generated by the simulated scenario conditions during the run.
· Event Details: Details for each event generated by the simulated scenario conditions during the run.
§ Event ID
§ Focus Name
§ Focus Type
§ Highlights
To create new simulator conditions for a threshold set, follow these steps:
1. In the All Thresholds page, select the check box corresponding to the threshold set you want to create new simulator conditions for.
2. Click Simulation History. The Simulation
Details for this threshold set opens as a new tab.
3. Click Open Simulator. The Create Simulator Condition pop-up window displays.
Alternatively, you can access the Create Simulator window by clicking Open Simulator in the All Thresholds page. The Create Simulator Condition pop-up window displays.
4. Create the simulator conditions by providing the following details:
· Select the required scenario from the Select Scenario drop-down list.
· Select the required threshold set from the Select Threshold drop-down list.
· Select the Batch Date as the date for the data you want to test the thresholds against. This can be the current date or a past date.
· Enter the Data Origin.
5. Click Save.
NOTE:
If the simulation run fails, you can retrigger the simulation for successful run.
To run the threshold simulator for an existing scenario threshold set, follow these steps:
1. In the All Thresholds page, select the check box corresponding to the threshold set you want to run the simulator for.
2. Click Open Simulator. The Simulator Conditions pop-up window displays.
Alternatively, you can also run existing threshold set from the Simulation Details tab by clicking Open Simulator. The Simulator Conditions pop-up window displays.
3. Select the Batch Date as the date for the data you want to test the thresholds against. This can be the current date or a past date.
4. Enter the Data Origin
· Select one or more Jurisdictions for this threshold set using the drop-down list. Jurisdiction refers to the division of data in the database based on criteria such as geographical boundaries, legal entities, and so on.
· Enter the Lookback Period for this threshold set. Lookback period refers to the number of seconds, minutes, hours, or days to lookback from the current date or time to create a time window which is used to consider cases for correlation.
· Enter the Frequency Period for this threshold set. Frequency period refers to how frequently the scenario should be run.
· Enter any comments you have for this threshold set.
· Enter the values you want for this threshold set in the New Value field.
5. Select Save & Simulate. The simulation runs for the selected scenario. After running a simulation, the Simulator History window displays the result with the number of event matches and details of each event. You can view the following details:
· Simulation ID: ID for this simulation run.
· Data Origin: Data Origin of the data set the simulated scenario conditions are run against.
· Jurisdiction: Jurisdiction the simulated scenario conditions are run for.
· Batch Date: Date the simulated scenario conditions are run for.
· Results: Number of event matches generated by the simulated scenario conditions during the run.
· Event Details: Details for each event generated by the simulated scenario conditions during the run.
§ Event ID
§ Focus Name
§ Focus Type
§ Highlights
NOTE:
If the simulation run fails, you can retrigger the simulation for successful run.
When a threshold set simulation has completed, you can view the details of all thresholds in this simulation and their results in the Simulation Details. This allows you to determine whether your threshold set is generating the expected detection results or if further modification is required.
You can also view the Simulation Details for all runs of a threshold set which has been previously run. To open the Simulation Details, follow these steps:
1. In the All Thresholds page, select the check box corresponding to the threshold set you want to view simulation details for.
2. Click Simulation History. The Simulation
Details for this threshold set opens as a new tab. You can view the following
details:
§ Simulation Run: ID for this simulation run with the scenario name.
§ Jurisdiction: Jurisdiction the simulated scenario conditions are run for.
§ Run Date and Time: Date and time the simulation was run.
§ User ID: User who ran the simulation.
You can export the results of the threshold set simulation runs in .xlsx format by selecting the check boxes for one or more simulation runs and clicking Export Results.
You can delete a simulation run by selecting the check
boxes for one or more simulation runs and clicking Delete
.
The Delete pop-up window displays: Are
you sure you want to delete <Simulation ID>? Enter a comment
and click Delete. A message displays:
Simulation Run successfully deleted.
To return to the All Threshold Sets tab, click the All Thresholds List tab.