Event closure for reducing event noise

An incoming event from a Catchpoint source via BMC Helix Intelligent Integrations is processed in BMC Helix Operations Management through a set of rules to determine whether the event contains the results of same test on the same node. If it does not contain this type of results, it is digested and displayed on the Events page. However, if it contains this type of results, the old event is closed. Event closure helps you eliminate event noise.

Related topics

Event policy types and evaluation order
Out-of-the-box event policies and templates


As incoming events are received, they are checked against existing events based on certain slot values. When an incoming event contains the results of same test on the same node as an existing event, the incoming event is identified as the event containing the latest alert information. The old event is closed and its notes are updated with the information that new event has been received. 

Event closure occurs for the CatchpointAlert class.

The following table lists the event policy created in BMC Helix Operations Management:

Event policy

Description

Close Old Catchpoint Events - BMC Helix Intelligent Integrations (Enabled by default in BMC Helix Operations Management)

This policy is created when you use BMC Helix Intelligent Integrations  for the first time to fetch alerts from Catchpoint. You can edit the policy as required.

  • Creates a new event and closes the old event if an incoming event contains the results of same test on the same node as an existing event. 
  • Updates the old event with the notes containing the event ID of the new event. based on the following slot values:
    • Status
    • Source Identifier
    • Source Event Identifier 


Policy evaluation order for processing events

Event deduplication and suppression polices are automatically run in the following order:

  • Drop Duplicate Events - BMC Helix Intelligent Integrations
  • Update Old Events - BMC Helix Intelligent Integrations
  • Close Old Catchpoint Events - BMC Helix Intelligent Integrations

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*