Default language.

Example: Enrich topology information by using event policy


Information
Scenario

Sarah is an administrator at Apex Global. Her operator, Jane, analyzes system events and discovers that an event is associated with a host and not with the impacted business service. She reports this issue to Sarah. Sarah wants to quickly address Jane's concern and capture the correct impacted entity in the event. She wants to resolve this issue by associating topology details for the business service in the event.

Can Sarah achieve this goal? Yes, Sarah can use the AssociateEventToNode function in the refinement policy to enrich topology information in the event by using string event slots in addition to the default topology slots defined in the event class.

To enrich the topology information, Sarah performs the following steps:

  1. Define the event selection criteria.
  2. Build the policy workflow.

Actions used in the example

  • Variable
  • Function

For more information about actions, see Actions-for-advanced-and-time-based-enrichment.

To define the event selection criteria

  1. Select Configuration > Event Policies and click Create.
  2. In Event Selection Criteria, define a condition to select events that contain the message NodeAssociateHas.

The following image illustrates how the event selection criteria will look:

AssociateEventToNode ESC.png

To learn how to construct the event selection criteria, see Creating-and-enabling-event-policies.

To build the policy workflow

On the Refinement page, perform the following steps:

Success
TipYou can hover over an action to view the complete label for the action as shown:Action_hover.png

  1. Add the Variable action by using the Concat function to concatenate the host value and store the function output in the $node.name variable.Save variable node name.png
  2. To add the Function action, use the AssociateEventToNode function to fetch the topology information by using custom event slots instead of the default topology slots and then Apply and Save the policy.
    AssociateEventToNode function settings.png

Results

The preceding policy workflow enriches the value of the event location and tags on the Event Details page.

Without event enrichment

AssociateEventToNode without event enrichment.png

With event enrichment

AssociateEventToNode with event enrichment.png

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Helix Operations Management 25.1