Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Operations Manager i10.62

Administer > Event Processing > Topology-Based Event Correlation > Define the Rule Topology

Define the Rule Topology

In this task, you use the Rule Topology pane to specify the configuration item types that you want to include in a correlation rule and what relationships and dependencies exist between the configuration item types. A relationship must exist between the configuration item types in a rule. The Correlation Rules manager does not permit you to save an invalid rule.

Note For information on button actions, see Correlation Rules User Interface.

To define the topology of a correlation rule:

Open the Correlation Rules manager:

Administration > Event Processing > Correlation > Topology-Based Event Correlation

Alternatively, click Topology-Based Event Correlation.
In the Rule Topology pane, use the View list to choose a topology view. The view you choose must contain the configuration item types that you want to use in the new correlation rule.
Specify the topology of the correlation rule by highlighting the path between the configuration item types that you want to associate in the correlation rule. The rule topology shows the relationships between all the configuration item types in the chosen view. If there is more than one path between the configuration item types specified as symptoms and cause in the correlation rule, the shortest path is taken. If you want to use an alternative one, you must make the selection manually.

When creating or modifying rules, it may not always be obvious when a rule is correctly specified. To guide you through correlation rule creation, short explanations are provided at the top of the pane.

Information presented in red indicates that there is an error or omission in the correlation rule. Follow the guidance to correct the error. If it proves difficult to create an error-free rule, use the Rebind button to create a binding between the cause and the symptoms. The rebind automatically removes all bindings and adds the shortest path between the cause and the symptoms.

Information presented in blue indicates that the rule is correctly specified and serves as a reminder to save the modified rule.

Note You select a path by clicking the links and objects in the chosen path. Active links are colored blue, inactive links are colored gray.

For more information about rule-topology views in correlation rules, see Event Correlation Rule topology and Rule Topology Pane.

Send Help Center feedback