Skip to content

Glossary: Security Monitoring and Automation

HAVING

Also written: having

The SQL clause that keeps only the groups that match a condition. In brute-tuned.sql, `HAVING count(*) >= 8` sets the rule's threshold.

Where the book teaches it

Related terms

GROUP BYthreshold ruleSQL (Structured Query Language)