Defining policies
A quick overview
Policies apply to objects. Refer to an Overview of objects if you don’t have an understanding of objects. Policies are defined via the Policies tab, which allows the dynamic configuration of objects based on sets of expressions and actions. Policies are activated when an object is added, removed or changed.
- Policy Actions – An action to perform (For example, associate a newly added object to an event template).
- Expressions – Criteria to determine whether an object matches (For example, the description contains the word “QA” and the name contains the word “Test”).
- Object Policy – Specifies the list of actions to be taken for an object if the object satisfies the policy’s expression. Most actions perform one operation when an object is added and another when removed (For example, associate the added object to a history template or remove the association for a removed object).
- Object Policy Group – A collection of object related policies or other object policy groups.
- Agent Policy – Specifies the list of object policies or object policy groups that apply to objects belonging to agents that satisfy the agent policies expression (For example, the agent’s description contains TECH=MQ would likely have a set of MQ related object policies).
- Agent Policy Groups – A collection of related agent policies or other agent policy groups. What is considered related is entirely under your control for your environment. The ability to nest agent policy groups and agent policies within other agent policy groups can help with re-usability and organizing your policies.
What is considered related is entirely under your control for your environment. Some examples might be, production, qa, MQ, DataPower. The ability to nest object/agent policy groups and object/agent policies within other object/agent policy groups can help with re-usability and organization of your policies.
These elements can be combined together to form a monitoring policy, which can include the following examples:
"Every Monday, at 2am, run discovery on agents with a "Production" role"
"Register all local queues named "QA.*" found on agents running with a "QA" role"
"Associate all queues named with a prefix of "Prod" to the Product event template"
The Policy Service
The Policy Service runs in the MVMM Application Service. It subscribes for updates from the Topic Service, matches those updates to a user-defined monitoring Policy Model, and takes the actions described in the Policy Model. It also evaluates scheduled policies.
Permissions required to view and edit policies
The following two permissions (set in the Security tab, see Defining-user-access-and-security-settings for details) are required to see the objects in the Policies tab or perform actions on them:
- Access Policies Tab
- Edit Policies