Event relationships and viewing event relationships

You can establish a relationship between two CIs or events by defining rules and policies.
For example, consider the following scenarios:

Scenario 1: Create a correlation policy between the following cause and effect events:

• Cause event could be a CPU reaching 80% usage for a device.
• Effect event could be response time of web URL hosted on that device is slow.

When you select the web URL event and view the event relationship, the Event Relationship window displays the cause event. By viewing and resolving the cause event, the effect event gets automatically resolved. In this example, by resolving the CPU issue the response time of the web URL improves.

Scenario 2: Create an Abstraction rule to generate an event when an application server and web server services of an online shopping portal is down with a message "Online shopping portal is down." If both these events are generated and you have taken no action, an abstraction event is generated with the message "Online shopping portal is down." You can view and take relevant action on these events.

For more information about creating and using user-defined policies, see Creating and using user-defined policies and for more information about rules for policy types and how to create them, see Creating the event processing rule(s) for a new policy type.

You can view the event relationships from the BMC ProactiveNet Operations Console by following this procedure.

To view event relationships

1. Click the icons to open the Event Relationship window with details of the selected event in the Selected Event: pane.
2. Select a relationship from the Relationships pane and the tabs displayed below vary based on the relationship selected. The tabs display the Event Condition Formula (ECF) name that you have defined in the policy you created.
   The Event Relationships icons are displayed in the Message column if an event has a relationship. represents the main event to which a new event is associated. represents an event that is associated with a main event.
3. Select a tab to view the details in the Details pane. For more information about viewing the details in the Details pane, see Viewing the event Details Notebook.

4. Click to refresh the data/screen.

   Note

   • If you have upgraded from an earlier version of BMC ProactiveNet Performance Management and you have related events, the icon is displayed in the Message column.
   • You can view the remote action results when you click in the Message column. This feature is available only from this release. For more information about remote actions, see Executing remote actions for selected events.