Managing Orchestration policies
When you create a custom use case on TrueSight Orchestration, associated custom Orchestration actions are enabled on all the events (irrespective of context) on the TrueSight console. If you run such an Orchestration action from a relevant event, it works as needed. However, you need to be careful about running such custom Orchestration actions. For example, you cannot run a custom Orchestration action for upgrading the RAM of a server from a critical event indicating insufficient disk space.
To avoid analyzing events every time before running a custom Orchestration action, you can create an Orchestration policy and configure the event selection criteria. The event selection criteria determines the type of events on which an Orchestration action must be enabled. Also, in the policy, you can enable the Orchestration action to run automatically when a relevant event occurs and perform triage and remediation actions.
Use the Configuration > Orchestration Policies page to view and manage a policy. By default, Solution Administrators have full access to all policies in all realms (tenants). Tenant Administrators have full access to all policies in their realm (tenant).
Before you begin
Ensure that you have already added the custom use case for the custom Orchestration action. For more information, see Add a custom use case to enable Orchestration actions
Failed to execute the [excerpt-include] macro. Cause: [Error number 2 in 0: No wiki with id [confluencePage:page] could be found]. Click on this message for details.
To create an Orchestration policy
- Go to Configuration > Orchestration Policies and click Create Policy.
In the Create Orchestration Policy page, specify the following details and click Save.
To edit an Orchestration policy
- On the Configuration > Orchestration Policies page, select a policy.
- From the policy action menu, select Edit.
- Change the configuration details provided while creating the policy and click Save.
To view an Orchestration policy
On the Configuration > Orchestration Policies page, click the policy name.
Alternatively, select a policy. From the policy action menu, select View.
To enable or disable an Orchestration policy
- On the Configuration > Orchestration Policies page, select one or more policies.
- Do one of the following:
- To enable a policy: From the policy action menu or from the common action menu, select Enable or Disable as required.
- To enable multiple policies: From the common action menu, select Enable or Disable as required.
To delete an Orchestration policy
- On the Configuration > Orchestration Policies page, select one or more policies.
- Do one of the following:
- To delete a policy: From the policy action menu or from the common action menu, select Delete and click Yes.
- To delete multiple policies: From the common action menu, select Delete and click Yes.
To enable or disable automation of the Orchestration action in the policy
- On the Configuration > Orchestration Policies page, select one or more policies.
- Do one of the following:
- To enable automation for a policy: From the policy action menu or from the common action menu, select Enable Automation or Disable Automation as required.
- To enable automation for multiple policies: From the common action menu, select Enable Automation or Disable Automation as required.
Fields and options on the Orchestration Policies page
The following figure highlights the various fields and options that are available on the Orchestration Policies page.
Where to go from here
After verifying that the custom Orchestration action is getting displayed correctly, you can directly initiate the Orchestration action to perform triage or remediation based on your use case. For more information about initiating Orchestration actions, see Using Orchestration actions to enable triage and remediation of events.