You manually relate selected events in the Event Browser (HTML) by assigning one event as a cause event. All other related events become symptom events.
To access
In the Event Browser (HTML), select the events that you want to relate, right-click one of these events, and select Relate Events from the context menu.
Tasks
How to Manually Relate an Event
-
In the Event Browser (HTML), select the events that you want to relate.
-
Right-click one of these events and select Relate Events from the context menu. The Relate Events dialog box opens.
-
Select one of the events as the cause event. All other events are symptoms of the selected cause event.
Check if the event has any related events that are hidden as a result of a correlation rule. The following icons indicate the event's position in a chain of events:
— Event is a cause in a correlation rule
— Event is a cause in one correlation rule and a symptom in another
— Event is a symptom in a correlation ruleFor details about correlated events, see Related Events.
-
Optional. Manually related events can also be used as the basis for automatically generating a correlation rule. If you also want to create a correlation rule based on the current relationship, select the check box Open correlation rule wizard. For details about creating a correlation rule using the Correlation Rule Generator, see Creating Correlation Rules from Manually-Related Events.
-
Click OK.