Establish Criteria or Relationships for Incoming Incidents

Using NNMi, you can establish the criteria or relationships for the incoming incidents using any of the incident configurations shown in the following diagram. You can choose to use them as is, edit them, or create your own configurations.

Incident Configuration Tabs

You can also create Pairwise Configurations and your own Custom Correlations as described in the table below. See About Pairwise Configurations and Configure Custom Correlations for more information.

Additional Configuration Options
Configuration Option When to Use Example
Pairwise Configurations

Select the Pairwise Configurations view under the Incidents folder to pair the first occurrence of an incident to another subsequent incident.

Note NNMi provides Correlation Notes information only when the Causal Engine has analyzed and Closed the incident. Software that is integrated with NNMi might also provide information identifying the reason an incident was Closed. Any time an incident is Closed manually (for example, by the network operator), NNMi does not provide Correlation Notes information.

Correlate a CiscoLinkDown incident as the Child Incident for a CiscoLinkUp incident.
Custom Correlations

Select the Custom Correlation Configuration view under the Incidents folder of the  Configuration workspace to correlate incidents using regular expressions to define the relationships between Parent and Child Incidents. This feature is useful when you want to define a relationship between a number of incidents potentially from different network objects that form a logical set to identify a problem. The set of correlations is considered complete if all of the incidents arrive within a specified time window.

When configuring a Custom Correlation, you select the Parent and Child Incident configurations, the time window, and the regular expression that defines the relationship requirements that must be met before the incidents are correlated.

Correlate Interface Down incidents that occur for subinterfaces under the Interface Down incident generated for the main interface

See Configure Incidents for more information about the Incident Configuration options. See Load SNMP Trap Incident Configurations for more information about how to specify which SNMP traps you want to receive by automatically creating or updating an incident configuration for an SNMP trap using a MIB file.

Related Topics

Configure management events

Configure SNMP Trap Incidents

Configure Syslog Message Incidents (ArcSight)