AMS processes patterns in the following order of efficiency:
1. Standard patterns with keywords are processed most efficiently.
2. Standard patterns without keywords are processed less efficiently than standard patterns with keywords.
3. Nonstandard patterns are processed least efficiently.
For most efficient pattern matching, observe these guidelines when developing your autoaction database.
Use a standard pattern with keywords when possible.
Use a standard pattern without keywords to match the following types of messages:
All messages from a single host
All messages from a single host that do not match standard patterns with keywords in the database
Messages that have no keywords or fixed text
Messages that have a distinguishing token that does not always appear in the same position
Variable-length messages whose most distinguishing token appears at the end of the message
Use a nonstandard pattern when pattern matching depends on a portion of the message text that is delimited by characters other than spaces.