Adding a basic event rule type

Add a basic event rule type to trigger email notifications for monitored events and external events on systems on which a Infrastructure Management device has been defined.

To add a basic event rule

1. On the Administration tab, click Edit next to the Event Rules entry to display the Event Rule Administration page.

2. Click Add to display the Add Event Rule (Page 1/3) window.

3. On the Add Event Rule (Page 1/3) window, update or modify the text boxes and selections listed in the following table: 

   
   Fields on the Add Event Rule (Page 1/3) window
   

    

   Item	Description
   Event Rule Name	Required. Alphanumeric string that describes the name of the event
   Description	Description of the event
   Time Range/Schedule	You can select either the Time Range or the Schedule option.  Time Range: Time of Day Range — Select the time range in days. To include 24 hours, select "00:00"-"00:00". Days of Week — Select this option to include the day of the week. Schedule: Click New to create a schedule or Edit to edit a schedule from the list. For detailed steps, see Managing schedules
   Temporarily disable Event Rule	Disables the event from being applied immediately
   Event Rule Type	Click Basic Event Rule.
   Groups Filter
   No Filter Include Selected Groups Exclude Selected Groups	The No Filter option is available to all users. Select No Filter to apply the event rule to all monitors. Include Selected Groups: Applies the event rule to the selected group Exclude Selected Groups: Does not apply the event rule to the selected group If you select either the Include Selected Groups or Exclude Selected Groups option, then only device-associated events trigger the event rule.  If you select No Filter, then both device-associated and non device-associated events can trigger the event rule.  Use an event management policy to trigger non device-associated events exclusively. See the Event Policy tab of the administration console.
   Available Groups Selected Groups	Available Groups lists only those monitors in the group which you can access. Select from the list and use the arrows to move it to Selected Groups.
   Hierarchy	Use hierarchy on or off to switch over to the corresponding view type.

    

4. Click Next to display the Add Event Rule (Page 2/3): Select Event/Monitor/Severity Information page. Update the options listed in the following table:
   
   Event, monitor, and severity options of event rules on the Add Event Rule (Page 2/3): Select Event/Monitor/Severity Information window
   

    

   Options	Description
   Event Type Filter
   Intelligent Events External Events	Intelligent Events: These are internal events: Infrastructure Management events that are generated when you have data collection and monitoring enabled on the Infrastructure Management system  Infrastructure Management Operations Manager (POM) users do not see intelligent events. Note BMC PATROL Agent events that are associated with monitors are not considered intelligent events in event rules. PATROL Agent events are considered external events. External Events: External events refer to device-associated events and events received from external event adapters. By default, both options are selected. You can select one or both options. When you select both Intelligent Events and External Events options, you enable the filter options that apply to both options: Event severity filter (but not the relationship direction Any, Up, or Down) Event states Open, Close, Acknowledge, and Assigned When you select both Intelligent Events and External Events options, the following filters are disabled: Monitor Type filter options Relationship direction Any, Up, or Down options of the event severity level Abnormality and Predictive event filters For External Events, remote actions apply only to device-associated events. Run Agent Actions, however, apply only to Intelligent Events.
   Monitor Type Filter
   No Monitor Type Filter/Select Monitor Types	Select No Monitor Type Filter, if no specific monitors are needed. By default, this enables all available monitors. Select Monitor Type to assign the type of filter by choosing from the Available Monitor Types pane and moving them to the Selected Monitor Types pane.
   Severity/State Filter
   Event tab
   Any	Triggers event rule for any severity level that matches the specified severity  The event severity levels are as follows: Info Warning Minor Major Critical Info-Warning Minor-Major Major-Critical Info-Warning-Minor Warning-Minor-Major Minor-Major-Critical Info-Warning-Minor-Major-Critical
   Up	Triggers event rule every time the new severity is higher than the old severity
   Down	Triggers event rule every time the new severity is lower than the old severity
   Open	Triggers event rule every time a new event is opened
   Close	Triggers event rule every time an event is closed
   Acknowledge	Triggers event rule every time an event is acknowledged
   Assigned	Triggers event rule every time an event is assigned
   Abnormality tab
   Open	Triggers event rule every time a new abnormality is opened
   Close	Triggers event rule every time an abnormality is closed
   Abnormality Score >=	Use this option to filter abnormal events that have abnormality score from the list.
   Predictive tab
   Select Predicted Severity	Specifies the severity level of the predicted event. Valid values are as follows: Minor Major Critical Minor-Major Major-Critical Minor-Major-Critical
   Open	Triggers an event rule each time a predicted event is opened
   Close	Triggers an event rule each time a predicted event is closed
   Acknowledge	Triggers an event rule each time a predicted event is acknowledged
   Assigned	Triggers an event rule each time a predicted event is assigned

    

5. Click Next to display the Add Event Rule (Page 3/3): Action Information for Event Rule update the options listed in the following table:
   
   Action options of event rules on the Add Event Rule (Page 3/3): Action Information for Event Rule window
   

    

   Options	Description
   Actions to Perform	Lists the actions that you have associated with the event after clicking the Add button corresponding to the action
   Send Email action
   From	Your email address
   To	Recipient email address
   Message Format	Select one of the following options: Full Page ASCII One-line Summary ASCII Full Page HTML/GIF
   Email Group	Option to create email groups. For detailed steps, see To create or edit an Email Group.
   Event Text Customization	Customizes the settings for all email alerts.  For more information, see Customizing the event text for email alerts.  Click Add to include a Send Email action.
   Send SNMP Trap action
   SNMP Host (Name/IP)	To send events to a management system that accepts standard SNMP traps, enter the SNMP host name or IP address, and clickAdd. For detailed information see Managing Infrastructure Management events through SNMP traps.
   Run Command on Proactive Server action
   Path	Include the file path where you want to run specified executables or scripts and execute an application or script when an event occurs. Then, click Add.  Note To add an xMatters (formerly Alarmpoint) notification for a data-only implementation, create an event rule by using thexMatters command. Enter pw_AlarmPoint -u userName in the Path field. If you do not enter the user name, the event is sent to the default user. Email is sent to the configured user. See also Managing the xMatters integration. For detailed information about the run command, see Managing Infrastructure Management events through Run Command on Server.
   Run Agent Actions	Based on the monitor types or monitor instances you have selected, if there are any agent actions available, the agent actions are displayed. Select an agent action, and click Add. The agent actions are available only when: You have the Allow execution of Agent Action permission permission. By default, the following roles have the Allow execution of Agent Action permission: Super Admin Event Administrator Data Collection Administrator Service Administrator For other roles, these permissions must be assigned by the administrators to access the agent actions.  The application class to which the monitor belongs have menu commands that are marked as annotate in the Knowledge Modules (KMs) for BMC PATROL Agent.
   Run Remote Actions	For systems without local agents, create and register a user-defined command to associate with the event rule. Then, choose the process to inquire about from the list, and click Add.  Remote actions are triggered by device-associated events, where the device is the target system on which the remote action is executed. The event must be mapped to the device through a device alias. The device must have its authentication credentials defined so that the remote action can access the device.
   Integrate with BMC Server Automation
   Execute BMC Server Automation Action	Runs the snapshot on BMC Server Automation automatically. Do not use this action for any other event rule apart from DefaultRule-BladeEvent. For more information, see Integrating with BMC Server Automation.

    

After adding actions to the event, click Done to save the event rule type and its attributes.

The newly created event rule is displayed in the event rule list of the Event Rule Administration page.