You can customize the expression to create a generic event to analyze the received TCP and/or UDP data packages, and trigger events when specified conditions are met. In this way, you can easily integrate your system with a very wide range of external sources, such as access control systems and alarm systems.

1. Click Event & Alarm > Generic Event to enter the generic event settings page.
   Figure 1. Generic Event Settings Page
2. Click Add to enter the Add Generic Event page.
   Figure 2. Add Generic Event Page
3. Set a name for the event in the Event Name field.
4. Optional: Copy the settings from other defined generic events in the Copy from field.
5. Select TCP or UDP to analyze the packages using TCP or UDP protocol.
6. Select the matched type which indicating how particular your system should be when analyzing the received data packages:

   Search

   The received package must contain the text defined in the Expression field.

   For example, if you have defined that the received packages should contain "Motion" and "Line Crossing", the alarm will be triggered when the received packages contain "Motion", "Intrusion" and "Line Crossing".

   Match

   The received package must exactly contain the text defined in the Expression field, and nothing else.

7. Define the event rule for analyzing the received package in the Expression field.
   1. Enter the term which should be contained in the expression in the text field.
   2. Click Add to add it to the expression.
   3. Click parenthesis or operator button to add it to the expression.
   4. To add a term, parenthesis or operator to the expression, position the cursor inside the expression field in order to determine where a new item (term, parenthesis or the operator) should be included, and click Add or one of the parenthesis or operator buttons.
   5. To remove an item from the expression, position the cursor inside the field in order to determine where an item should be removed, and click . The item immediately to the left of the cursor will be removed.

   The parenthesis or operator buttons are described in the following:

   AND

   You specify that the terms on both sides of the AND operator must be included.

   For example, if you define the rule as "Motion" AND "Line Crossing" AND "Intrusion", the term Motion, and Line Crossing as well as the term Intrusion must be all contained in the received package for the conditions to be met.

   Note:

   In generally, the more terms you combine with AND, the fewer events will be detected.

   OR

   You specify that any term should be contained.

   For example, if you define the rule as "Motion" OR "Line Crossing" OR "Intrusion", any of the terms (Motion, Line Crossing, or Intrusion) must be contained in the received package for the conditions to be met.

   Note:

   In generally, the more terms you combine with OR, the more events will be detected.

   (

   Add the left parenthesis to the rule. Parentheses can be used to ensure that related terms are processed together as a unit; in other words, they can be used to force a certain processing order in the analysis.

   For example, if you define the rule as ("Motion" OR "Line Crossing") AND "Intrusion", the two terms inside the parentheses will be processed first, then the result will be combined with the last part of the rule. In other words, the system will first search any packages containing either of the terms Motion or Line Crossing, then it search the results to look for the packages that contained the term Intrusion.

   )

   Add the right parenthesis to the rule.

8. Finish adding the event.

   • Click Add to add the event and back to the event list page.

   • Click Add and Continue to save the event settings and continue to add event.

9. View in the Generic Event list to check whether the event has been added successfully.
10. Optional: Perform the following operations after adding the event.

    Option	Description
    Edit Event Settings	Click the name in the Event Name column to edit the corresponding event settings.
    Enable Receiving Generic Event	If appears near the event name, it means the system has not enabled receiving generic event. You should hover the cursor over the and click Configuration on the tooltip to enable receiving generic event for the system. For details, refer to Enable Receiving Generic Event.
    Delete Event Settings	Check the event(s) and click Delete to delete the selected event settings.
    Delete All Event Settings	Check the checkbox in the heading row, and click Delete to delete all the event settings.