Performing event operations

Basic event operations and results

The following table describes the basic event operations and results:

To perform event operations on multiple events

Use the check box, Ctrl-click (multiple, non-continuous events), or Shift-click (multiple, continuous events) to select events. Use the event action menu to perform an event operation. To customize the number of multiple events to perform event operations on, see Customizing-the-display-of-the-event-list.

When you select two or more events in the event list, you can view all event operations that are available to your user role. However, an operation is performed only on the selected events whose status makes the operation valid. If the operation is invalid for some selected events, a warning box reports the internal IDs of those events and the reason the operation is invalid. Click OK to execute the event operation on the applicable events, if any.

You can select up to a maximum of 500 events simultaneously to perform all event operations.

If you select more than 100 events, the following points hold true:

• The event operations are executed with some delay.
• Only visible slots are exported.
• The next auto-refresh cycle of the events page is skipped so that the bulk event operations are executed seamlessly.

To acknowledge an event

1. From the event list, select one or more open events. 
2. From the event action menu, select Acknowledge Event or from the event toolbar, click .
3. If a confirmation window appears, optionally enter any notes for the event and click OK.
   The  icon appears in the event status column to indicate that you have acknowledged the event.

To take ownership of an event

1. From the event list, select one or more open or acknowledged events. 
2. From the event action menu, select Take Ownership or from the event toolbar, click .
3. If a confirmation window appears, optionally enter any notes for the event and click OK.
   The  icon appears in the event status column to indicate that you have taken ownership of the event.

To decline ownership of an event

1. From the event list, select one or more events that you own. 
2. From the event action menu, select Decline Ownership or from the event toolbar, click .
   You can decline an event only if you are the owner of that event.
3. If a confirmation window appears, optionally enter any notes for the event and click OK.
   The  icon appears in the event status column to indicate that you have acknowledged the event.

To close an event

1. From the event list, select one or more open, assigned, acknowledged, or blackout events. 
2. From the event action menu, select Close Event or from the event toolbar, click .
3. If a confirmation window appears, optionally enter any notes for the event and click OK.
   The  icon appears in the event status column to indicate that you have closed the event.

To assign an event

1. From the event list, select one or more events. 
2. From the event action menu, select Assign Event or from the event toolbar, click .
3. Type the user name to assign the events to a user. Optionally enter any notes for the event and click OK.
   The  icon appears in the event status column to indicate that you have assigned the event.

To set the priority of an event

1. From the event list, select one or more open, assigned, or acknowledged events. 
2. From the event action menu, select Set Event Priority or from the event toolbar, click .
3. Select the priority to assign to the events, optionally enter any notes for the event and click OK.
   The priority icon and text is updated to reflect the newly-assigned priority.

To unacknowledge an event

1. From the event list, select one or more acknowledged events. 
2. From the event action menu, select Unacknowledge Event or from the event toolbar, click .
3. If a confirmation window appears, optionally enter any notes for the event and click OK.

To launch the performance overview

1. From the Events page, select an event.
2. From the event action menu, select Launch Performance Overview or from the event toolbar, click .The Performance Overview tab of the Event Details page displays a historical graph of the monitored object for which the event occurred.

To launch the dashboard

1. From the Events page, select an event.

2. From the event action menu, select Launch Dashboard to launch the Event Data dashboard in BMC Helix Dashboards. This dashboard displays the number of open events according to their severity, and the number of closed events. It also displays the trend of open events in your system. For more information, seeBMC Helix Operations Management Event Data dashboard.

To view event details

1. From the Events page, select an event.
2. From the event action menu, select View Event Details or from the event toolbar, click .
   The Summary tab of the Event Details page displays key information about the event, such as status, severity, priority, date and time of occurrence, object class, object name, host, owner, message, and a detailed message. Alarms and abnormalities are also displayed in the Summary tab.

To export data for an event

1. From the event list, select one or more events. 
2. From the event action menu, select Export or from the event toolbar, click .
3. In the Export window, select the format and content and click Export. 
   The event content is exported for all the slots or the visible slots in the .baroc, .XML, or .csv file formats.

To add notes for an event

1. From the event list, select one or more events. 
2. From the event action menu, select Add Notes or from the event toolbar, click .
3. Enter any notes for the event and click OK.

To change the table view for an event

1. From the event list, select one or more events. 
2. From the event toolbar, click .
3. In the Select Table View window, select an appropriate table view and click OK. 
   For more information about accessing and creating table views, see Creating-table-views.

To create an incident for an event

1. On the Events page, from the event list, select an event.
   You cannot select multiple events to create an incident.
2. From the event action menu or from the event toolbar, select Create Incident. A request message for incident creation is submitted and displayed. After the request is created successfully:
   • You can view the logs in the Logs & Notes tab on the Event Details page
   • The existing event is updated with the ID of the incident created in BMC Helix IT Service Management
   • A new INCIDENT_INFO event is created that contains details such as incident_priority, incident_status, incident_submitter, incident_assignee, and so on of the generated incident

To trigger automation for an event

1. On the Events page, from the event list, select an event. 
   You cannot select multiple events to trigger an automation.
2. From the event action menu or from the event toolbar, select Trigger Automation.
3. In the Automation window, from the list of available automations, click Run this Automation against the automation policy that you want to run on the event.
   A request message for automation policy execution is submitted and displayed. After the request is created successfully, an information and warning event of the AUTOMATION_STATUS_EV class is created that contains details of the policy execution such as policy name and state. You can view the status of the automation policy execution in the Status column of the automation window. The status of the execution has one of the following values:
   • Successful
   • Running
   • Failed
4. (Optional) Run additional automations from the list of available automations for the selected event.
   The automation list displays the latest executed automation at the start of the list.
   
   

To modify an event

1. On the Events page, from the event list, select an event. 
   You cannot modify more than one event at a time.
2. From the event action menu, select Modify Event.

3. In the Modify Event dialog box, select the event slot that you want to modify and specify a value for the selected slot.

   Important

   • You can modify event slots that have the String, List of String, Integer, and Enumeration data type in an out-of-the-box or custom class. The slot list does not display read-only, hidden, and internal slots.
   • You can specify slot placeholders in slots that have the String type. For example, %msg% or %details%.
     However, the slot placeholder specified only in the Message and Detailed Message slots is replaced with the slot value present in the selected event.
     
   • By default, if only the repeat_count slot is updated in an event, the event updates are not published to the corresponding incident in BMC Helix IT Service Management.
     For any other slot updates in an event, the event updates are published to the corresponding incident in BMC Helix IT Service Management.
     To publish event updates to the corresponding incident in BMC Helix IT Service Management only on specific slot updates in an event, contact BMC Support.
4. (Optional) Click Add more slots to modify additional event slots.
5. Click OK.

After you modify events, you can view the event logs in the Logs & Notes tab on the Event Details page.

To delete an event

1. On the Events page, from the event list, select closed events that you want to delete. 
2. From the event action menu, select Delete Event or from the event toolbar, click Delete Event.
3. In the confirmation window, click OK.

To audit deleted events

As a tenant administrator, use the BMC Helix Audit Dashboard in BMC Helix Dashboards to view the audit trail for events that have been deleted to achieve improved user accountability, compliance with organization policies, and system security. The audit trail also displays the count of events that were deleted.

The BMC Helix Audit Dashboard captures logs if you delete a single event or multiple events.

For more information, see Auditing configuration changes in BMC Helix Dashboards.

The following image displays the audit trail of deleted events in the BMC Helix Audit Dashboard. Note that the selected resource type is Event Operation. In the Audit Records table, click the link in the Operation column to view the values before and after you delete events.