Example: If change event does not exist, drop the related task event
To drop an incoming task event, perform the following steps:
Actions involved
- Unless
- Function
To define the event selection criteria
- Select Configuration > Event Policies and click Create.
- In the Event Selection Criteria, define a condition to select events from the third-party application (with the custom event class).
The following image illustrates how the event selection criteria will look.
To build the policy workflow
On the Advanced Enrichment page, perform the following steps to build the policy workflow:
- Add the Unless action. Under the Unless Settings, define a condition to check if the incident change event exists.
- Add the Function action to drop the incoming task event, if the change event does not exist.
Results
The resulting policy workflow drops an incoming task event if the related incident change event does not exist for a third-party application as shown in the following image: