Rule based on fatal alarms

I am trying to create an event driven rule triggered by AlarmSystemEvent that will forward  all  fatal alarms to a NOC email.  It seems simple enough but what I don't know is :

1. How to write the query to filter on Fatal alarms

2. Wheter to put the query in the scope or to put in under the rule fire conditions.

Update :  I found my answer in teh Foglight forum . Here is the link http://en.community.dell.com/techcenter/performance-monitoring/foglight-administrators/f/4788/t/19551369#1593