An enrichment policy adds values for specific event slots if those slots are empty when the event is received from the event source. An enrichment policy can also reformat slots or normalize slot values.
To create an enrichment policy
- From the Event Management Policies tab of the Administration View, expand the By Policy Type folder.
- Under the By Policy Type folder, select Enrichment Policy.
- Click Add Policy.
A Selector Chooser dialog box is displayed.
- From the Selector Chooser dialog box, select the event selector that you want to use for this policy and click OK.
The Enrichment Policy Details tab is displayed in the details pane as shown in the following figure.
Enrichment Policy Details tab
- In the Description field, type a description of the event management policy.
- To enable the event management policy, select the Enabled check box. If you do not want to enable the policy at this time, you can return to this dialog box and enable the policy later.
- In the Policy Activation Timeframes section, define the periods of time that the event management policy should be active (when enabled) by performing the following actions:
- Select one of the following choices:
- To make the event management policy active continuously, select Always Active.
- To specify when the policy is active or inactive, select Define Activation Timeframes.
The Active Timeframes and Not Active Timeframes lists are enabled.
- If you selected Define Activation Timeframes, depending on how you want to define the timeframe for your policy do one or both of the following:
- Enable the following check boxes as necessary to assign appropriate settings:
- Event Priority—the relative priority to assign to the event (1 is a high priority)
- Event Category—the classification to assign to the event; categories include
- Event Severity—the severity to assign to the event
- Location to Set—the physical location of the object, such as a city
- Services to Set—the service that the event is associated with
- In the Message Text Format field, define the message slot enrichment for the event as follows:
- From the list of available event slots in the Event Slot field, select an event slot to which to add enrichment information and click Insert.
To insert a a slot value into the message, either type the slot name surrounded by % characters or select the slot name from the Event Slot list and click Insert.
The Message Text Format box is a standard text box. You can position the cursor and type or insert text and slot references in any order. The resulting string of characters in the Message Text Format box, %<slot name>%, whether typed or inserted, is used as a template to create the message (msg slot) for the event.
Repeat steps these steps to add more enrichment information to the event slot, if necessary.
The hidden and list of slots are not available for message enrichment.
To avoid unpredictable results when adding a text message, use no more than one set of quotation marks.
To save the completed event enrichment policy, click OK.
administration console saves the defined event management policy, and it is displayed in the list of event policies for the selected event selector.
The enrichment policy is ineffective when an event is updated by the RATE process.