Administer > Event Processing > Topology-Based Event Correlation > Specify Correlation Rule Symptoms

Specify Correlation Rule Symptoms

In this task, you learn how to specify one or more events as symptoms in a correlation rule. You define the symptoms of a correlation rule by specifying one or more indicator states used to monitor particular events in your IT environment, for example, Database:Unavailable or Service:Slow.

Note For information on button actions, see Correlation Rules User Interface.

To specify symptoms for a correlation rule:

  1. Open the Correlation Rules manager:

    Administration > Event Processing > Correlation > Topology-Based Event Correlation

    Alternatively, click Topology-Based Event Correlation.

  2. Create a (or open an existing) correlation rule. For more information about creating correlation rules, see Create Event Correlation Rules.

  3. In the Rule Topology pane, select the configuration item type, the indicator state of which you want to use as a symptom in the selected correlation rule.

  4. In the Indicators pane, expand the indicator containing the indicator state you want to specify as a symptom in the selected correlation rule.

  5. Right-click the indicator state you want to use as a symptom in the correlation rule, and select Add as a Symptom from the context menu.

    The selected indicator state should appear in the list of symptoms and causes in the Symptoms and Causes pane.