Configuring event policies


This topic provides instructions on creating, editing, copying, viewing, enabling, disabling, and deleting event policies. To understand the concept of event policies and how they can be useful, see Event policies.


The following video (3:50) illustrates how to configure event policies.

 https://youtu.be/pere1dQ6nbg

Creating an event policy

On the Configuration > Event Policies page, click Create, and do the following:

  1. Specify a unique name, optional description, and precedence number for the policy.

  2. Create the event selection criteria based on which the policy is applied to the events. 

     Constructing the selection criteria

    When you click in the box, you are prompted to make a selection. Each time you make a selection, you are progressively prompted to make another selection. 

    The selection criteria consist of an opening parenthesis, followed by the slot name, the operator, the slot value (which can be a string based on the type of slot selected), and the closing parenthesis. You can optionally select the logical operator AND or OR to add additional conditions. Specifying the opening and closing parentheses is optional.

    Example criteria: If you specify the following criteria, all the PATROL events with the "Open" status are selected and the policy is applied to them.

    The green tick mark indicates that the event selection criteria syntax is correct.


    You can also copy the criteria by clicking Copy . The copied criteria can be reused in subsequent policies by pressing Ctrl+V in the Event Selection Criteria field.

    About specifying the class

    A condition based on the class slot must be specified before any other condition. In the subsequent conditions, the list of slots change based on the class specified. The subsequently displayed slots are subclasses of the parent class selected in the first condition.

    For example, in the following image notice the list of slots specific to the selected Alarm class.


  3. The time frame for which the policy is always active. 

  4. Select one or more of the following policy types and configure them.

    Slots configured in the event policy settings

    Some of the event policies allow you to define slots while configuring the policy settings. The list of these slots is restricted to the event class selected in the the event selection criteria. If no class is selected in the event selection criteria, the base EVENT class slots are displayed for selection.  

    • Basic Enrichment: Processes events with refined slot values to make the events more meaningful.

      Select the required settings and specify the values.

    • Notification: If the notification service is Email, the policy notifies users via email that an event has occurred, so that appropriate actions can be taken.
      If the notification service is Incident, the policy is used for Proactive Service Resolution (PSR) integration.

      Select the required Email settings and specify the values. For some values you might want to specify slots. For more information about slot definitions, see Event classes and slots.

    • Suppression: Automatically drops new events selected based on the event selection criteria. You do not require any configurations for this policy.

    • Advanced Enrichment: Processes events with refined slot values based on the defined policy workflow to make the events more meaningful. Allows you to configure and use advanced settings for enriching incoming events. 

      For more information, see Processing events with advanced enrichment and time-based enrichment.

    • Time Based: Processes events with refined slot values after a scheduled duration of time and based on the defined policy workflow to make the events more meaningful. Allows you to configure and use advanced settings for enriching incoming events. 

      For more information, see Processing events with advanced enrichment and time-based enrichment. 

    • Correlation: Correlates and combines multiple matching events into a single aggregated event. For more information, see Correlating events.

  5. Use the icons to edit or delete the configured policy types.

  6. (Optional) Select Enable Policy.
    You can enable or disable the policy any time from the Event Policies page.
  7. Save the policy.

Editing an event policy

On the Configuration > Event Policies page:

  1. Do one of the following:
    • Select the policy and click Edit.
    • From the Actions menu of a policy, select Edit.
  2. Edit the policy and save the changes.


Can I edit a predefined policy?

Yes.

However, while editing the Predefined Policy for Incident notification policy, ensure that you do not change the name of the policy.

The Predefined Policy for Incident notification policy is required if BMC Helix Operations Management is integrated with Proactive Service Resolution (PSR). For more information, see Integration with BMC Helix ITSM.

Copying an event policy

On the Configuration > Event Policies page:

  1. Click the action menu of the policy that you want to copy and select Copy
    The Create Event Policy page is displayed with the configurations of the copied policy. 
  2. Modify the configurations according to your requirements to create a new policy quickly. 

Viewing the list of event policies

On the Configuration > Event Policies page, view the list of event policies.

By default, the policies are sorted by Name. To sort on a different column, click the column heading.

Enabling or disabling an event policy

On the Configuration > Event Policies page, do one of the following:

  • Select the policy and click Enable or Disable.
  • From the Actions menu of a policy, select Enable or Disable.
  • Edit the policy and select or clear the Enable Policy check box.

Deleting an event policy

On the Configuration > Event Policies page, do one of the following:

  • Select one or more policies, click Delete, and click Yes.
  • From the Actions menu of a policy, select Delete, and click Yes.

Was this page helpful? Yes No Submitting... Thank you

Comments

  1. Tim Bocardo

    Under Event Selection Criteria, it talks about Operators. Most of the operators are self-explanatory (Equals, Begins With, etc.) However, there's no description I can find of how to use "Matches". Please document that operator.

    Jan 26, 2021 04:21
    1. Tim Bocardo

      Here are the operators available in TSOM (BEM) rules: https://docs.bmc.com/docs/TSInfrastructure11304/operators-937360783.html

      Feb 01, 2021 01:10
      1. Priyanka Nanwani

        Adding this request to our backlog.

        Mar 10, 2021 07:33