Page tree
Skip to end of metadata
Go to start of metadata

cells evaluate event policies of different types based on the order of the rule phase in which the event management policy runs.

The following table describes the standard rule phases and their associated event policy types. 

Evaluation order

Rule phase

Event policy type

1

refine

blackoutenrichmentdynamic blackoutdynamic enrichmenttimeout (initialization)

2

filter NOPASS

suppression

3

regulate

threshold a 

4

threshold

threshold a escalation

5

new

closurerecurrence

6

abstract

no related event management policy

7

correlate

correlation

8

run

timeout (arm)notification

9

propagate

propagation

10

delete

no related event management policy

11

timer

timeout (run)escalation

Note

a Unlike other event policies, cells evaluate threshold event policies in two distinct phases – the first phase for the hold threshold and the second phase for the pass through threshold.

Warning

Although event policies of different types are evaluated according to their associated rule phase, event policies of the same type do not have an evaluation order. For example, if event selectors for two event policies of the same type select the same event, the cell evaluates the event according to one event management policy and ignores the other event management policy.

To prevent omission of event management policy evaluation, you must create mutually exclusive event selection criteria for two event policies of the same type. With the exception of dynamic blackout, dynamic enrichment, notification and propagation event policies, two or more policies of the same type should not run against the same event. In the case of exceptional event policies, the cell evaluates all event policies of those four types, even if their selectors reference the same event.

 

 

2 Comments

  1.  

  2.