Live Rules evaluate expressions against telemetry data as it streams into Sift in real time. Because they process telemetry incrementally rather than in batch, they have specific constraints that do not apply to Batch Rules. This page collects all known limitations and configuration recommendations for Live Rules in one place.Documentation Index
Fetch the complete documentation index at: https://docs.siftstack.com/llms.txt
Use this file to discover all available pages before exploring further.
Recommendations
Follow these practices to configure Live Rules for accurate evaluation and minimal telemetry loss.Limitations
Live Rules and Reports
Live Rules that do not generate any Annotations during the original evaluation are not linked to the Report and will not be included if the Report is rerun. To evaluate a Live Rule that was missed, generate a new Report on the Run and select the Rule manually.Edge cases and limitations
- Silent telemetry loss at the 1 kHz throughput limit does not produce an error or warning; the Rule simply evaluates a subset of the telemetry stream.
- The 4-minute channel timeout applies per channel; not per Rule. A Rule with multiple channels waits for each channel independently.