Out-of-the-box event management policies


Standard event management policies and dynamic enrichment policies are included with the BMC ProactiveNet. These policies enable you to interactively set up routine event processing quickly. 

To use out-of-the-box dynamic enrichment policies, you must enable the policy, import useful data into the sample .csv files and then import the data into the BMC ProactiveNet cell using the policy mechanism. For instructions to creating dynamic enrichment policies, see Creating-a-new-dynamic-enrichment-event-management-policy.

Several event management policies are included with the product that enable you to interactively set up routine event processing quickly. Standard event management policies that are provided out-of-the-box include:

  • PATROL_Portal_Closure_on_OK_Events
  • Apache_Login_Failed_Repeats
  • Blackout_Suppression
  • Adapter_Start_Stop_Closure
  • Client_Stop_Closes_Start
  • Sample_Component_Based_Enrichment_Policy
  • Sample_Intelligent_Incident_Service_Policy
  • Event_Reporting_Propagation
  • Event_Propagation_To_Remedy_Help_Desk

Dynamic enrichment policies that are provided out-of-the-box include:

  • Location_Enrichment
  • Service_Contact_Enrichment
  • PATROL_Message_Translation
  • BPM_STATE_CHANGE
  • BPM_RSM_STATE_CHANGE
  • PATROL_EVENT

The following table lists the out-of-the-box policies and indicates whether or not each out-of-the-box policy is enabled by default.

Policy type

Policy name

Description

Enabled

Closure

PATROL_Portal_Closure_on_OK_Events

Closes previous Portal events for the same managed object

Yes

Adapter_Start_Stop_Closure

Closes previous events for the same adapter instance

Yes

Client_Stop_Closes_Start

Client Stop events close Client Start events and then close themselves

Yes

JSERVERCellConnectionStatusPolicy

 

Yes

Close_Open_Alarms

 

Yes

RATECellConnectionStatusPolicy

 

Yes

Component Based Enrichment

Sample_Component_Based_Enrichment_Policy

Enriches events by filling selected event slots with the slot values of the
component type

No

Dynamic Blackout

Dynamic_Blackout

Blacks out events that meet a specified criteria during a specified time period

No

Dynamic Enrichment

Location_Enrichment

Appends the location of a server to an event

No

Service_Contact_Enrichment

Appends contact information for a server administrator to an event. For example, contact information might include the name of the administrator for that server and his or her telephone number.

No

PATROL_Message_Translation

Replaces the text of existing PATROL event messages with messages that can be more easily understood by operators.

No

Intelligent Incident Service

Sample_Intelligent_Incident_Service_Policy

Sample policy for creating Intelligent Incidents for Remedy Helpdesk

No

Propagation

Event_Propagation_To_Remedy_Help_Desk

Propagates events to Remedy Helpdesk

No

Event_Reporting_Propagation

Propagates events to the Portal for event reporting

No

Recurrence

Apache_Login_Failed_Repeats

Handles repeating Apache Login Failed events

No

Patrol_Portal_DeDup_Policy

Handles repeating Portal events for the same managed object

Yes

Suppression

Blackout_Suppression

Suppresses Blackout events

No

Component Based Blackout

Component_Based_Blackout

Suppresses events that meet a specified criteria during a specified time period for specified components

No

For instructions to use these out-of-the-box policies, see Creating-new-standard-event-management-policies and Creating-a-new-dynamic-enrichment-event-management-policy.

Warning

Note

The BMC Impact Integration for PATROL product can detect duplicate events and can correlate events that come from the same origin. The rules for detecting duplicated events are located in the installationDirectory/pw/server/etc/cellName/kb/rules/bii4p.mrl file. See the patrol_duplicates and the correlate alarm_and_ra definitions. You can use the new patrol_duplicates rule to delete duplicate events and the correlate alarm_and_ra rule to close a current event after a subsequent event arrives from the same origin.

BMC Impact Integration for PATROL does not provide a policy for these events.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC ProactiveNet 9.6