1 2 3 4 5 6 7 8 9 10 11 12
rule foo : bar baz { meta: string = "foo" bool = true int = 1 float = 3.14 strings: $foo = "foo" $foo_hex = { 66 6f 6f } condition: any of them }