Example: Generate events to check application availability
To generate events, perform the following steps:
Actions used in the example
The following actions are used in the example:
- If-Then-Else
- Function
For more information about actions, see Actions for advanced and time-based enrichment.
To define the event selection criteria
- Select Configuration > Event Policies and click Create.
- In the Event Selection Criteria, define a condition to select events from the class APP_MISSING_PROCESSES (custom event class) that contain the message "testApp".
The following image illustrates how the event selection criteria will look:

To learn how to construct the event selection criteria, see Creating and enabling event policies.
To build the policy workflow
On the Advanced Enrichment page, perform the following steps to build the policy workflow:
- Add the If action by defining a condition, under If Settings, that checks for a message indicating that the application is up.

- Under Then, add a Function action to generate an event of the APP_UP (custom event class) event class if the application is up.

- Under Else, add the If action by defining a condition, under the If Settings that checks for a message indicating that the application is down.

Under Then, add a Function action to generate an event of the APP_DOWN (custom event class) event class if the application is down.
Results
The resulting policy workflow generates events to check application availability as shown in the following image:

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*
