>>>> It's essentially Perl logical expression syntax, and basic math
>>>> expression syntax if you want to count:
>>>>
>>>> meta  NAME  rule1 && (rule2a + rule2b + rule2c + rule2d > 2)
>>> When adding rules is it a count of the number of rules or the rule scores?
> 
> It is never the score.
> 
>> It's the number of times the rule hit (e.g. 0 or 1 for regular rules; 0
>> or more for rules with 'tflags multiple').

Here's my workaround.  It involves some redundancy, but it does the trick:

# supposing:
score rule2a  1.3
score rule2b  1.6
score rule2c  0.8
# you can compare score sums like this:
meta NAME  rule 1 && (rule2a * 1.3 + rule2b * 1.6 + rule2c * 0.8 > 2)

(huzzah for mixing logic with arithmetic.)

Reply via email to