Approach

Rule engine supports only simple comparison operators. The trade-off of this approach is that you can't encode complex rules. To be able to support more robust rules we could embed a scripting languages like lua, possibly at the cost of performance bottlenecks.

Performance

for 200*4=800 sig and 3 rules this python code takes about 0.04 secs on a AMD6410