Unsupported content This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Creating a new correlation policy


A correlation policy relates one or more cause events to an effect event. You have the option of configuring this policy to close the effect event. The cell maintains the association between these cause-and-effect events.

To create a new correlation policy

  1. From the Event Management Policies tab of the Administration View, expand the By Policy Type folder.
  2. Under the By Policy Type folder, select Correlation Policy.
  3. Click Add Policy picobject_234.gif.

    A Selector Chooser dialog box is displayed.
    picobject_235.gif
  4. From the Selector Chooser dialog box, select the event selector that you want to use for this policy and click OK.

     The Correlation Policy Details tab is displayed in the details pane of the Administration View, as shown in the following figure.

    Correlation Policy Details tab
    correlation_policy.gif
  5. In the Policy Name field, type a unique alphanumeric name for the event management policy. The name must contain no spaces.
  6. To enable the event management policy immediately, select the Enabled check box. If you do not want to enable the policy at this time, you can return to this dialog box and enable the policy later.
  7. In the Description field, type a description of the event management policy.
  8. In the Policy Activation Timeframes section, define the periods of time the event management policy should be active (when enabled) by performing the following actions:
    1. Select one of the following choices:
      • To make the event management policy active continuously, select Always Active.
      • To specify when the policy is active or inactive, select Define Activation Timeframes.
         The Active Timeframes and Not Active Timeframes lists are enabled.
    2. If you selected Define Activation Timeframes, depending on how you want to define the timeframe for your policy do one or both of the following:
      • To specify the periods of time when the policy should be active, select the Active Timeframes check box and one or more timeframes from its scrollable list. 
      • To specify the periods of time when the policy should be inactive, select the Not Active Timeframes check box and one or more timeframes from its scrollable list.

        Note

        You can select both check boxes to create active and inactive time periods. However, the inactive time period takes precedence over the active time period.

  9. Complete a separate Cause Event tab as appropriate for each cause event that you want to define.

    The following table describes each of the controls in the Cause Event tabs.

    Cause Event tab controls

    Field name

    Description

    Enable check box

    Select this check box to relate the cause events to the effect events; this information is stored in the cell.

    Edit Event Criteria

    Click to specify the selection criteria for the cause event.

    Correlation Timespan check box

    Select this check box and enter a time limit within which the cause event must occur to produce the effect event.

    Close Effect Eventradio buttons

    Choose one of the following radio buttons to specify the circumstances under which the effect event is closed:

    • Upon Correlation—as soon as events are associated (cause and effect), the effect event is closed.
    • On Cause Event Closure—when the cause event closes, the effect event is closed also.
    • On Its Own—closing the cause event has no consequence to the effect event

    Escalate Cause Event check box

    Select this check box to escalate the cause event to the specified priority level

    De-escalate Effect Event check box

    Select this check box to de-escalate the effect event.

     

     

  10. To save the completed event correlation policy, click OK.

    administration console saves the defined event management policy, and it is displayed in the list of event policies for the selected event selector.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*