This documentation supports an earlier version of BMC Helix Operations Management.To view the documentation for the latest version, select 23.1 from the Product version picker.

Dynamically enriching events with external data

Dynamic enrichment policies enable you to import external data into the policy and match values in the external file to enrich event data. This policy is an extension of the advanced enrichment policy. 

You can build an advanced enrichment or a time-based enrichment policy workflow by combining various actions. However, the process or the policy workflow in a dynamic enrichment policy is fixed. To get an overview of the various enrichment scenarios, see Event-enrichment-for-adding-context.

Related topic

Advanced-time-based-and-dynamic-enrichment-policies

While creating a dynamic enrichment policy, you import an external CSV file and then define the match values and the enrichment values in the policy. Based on these inputs, the policy processes each incoming event to automatically match the correct values in the external file and use the corresponding values in the file to enrich the event data. Therefore, this policy is very useful when you want to perform enrichment based on multiple If-Then scenarios.

The following table covers the steps required for creating a dynamic enrichment policy:

To see an end-to-end process of creating this policy, see Example-Dynamically-enriching-events-from-an-external-file.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*