Searching the Help
To search for information in the Help, type a word or phrase in the Search box. When you enter a group of words, OR is inferred. You can use Boolean operators to refine your search.
Results returned are case insensitive. However, results ranking takes case into account and assigns higher scores to case matches. Therefore, a search for "cats" followed by a search for "Cats" would return the same number of Help topics, but the order in which the topics are listed would be different.
Search for | Example | Results |
---|---|---|
A single word | cat
|
Topics that contain the word "cat". You will also find its grammatical variations, such as "cats". |
A phrase. You can specify that the search results contain a specific phrase. |
"cat food" (quotation marks) |
Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase. |
Search for | Operator | Example |
---|---|---|
Two or more words in the same topic |
|
|
Either word in a topic |
|
|
Topics that do not contain a specific word or phrase |
|
|
Topics that contain one string and do not contain another | ^ (caret) |
cat ^ mouse
|
A combination of search types | ( ) parentheses |
|
Create correlation rules from manually-related events
Manually-related events can also be used as the basis for creating new or enhancing existing correlation rules. From the Event Browser, you need to identify related events, select a cause event, relate them manually, and choose to create a correlation rule to reflect this relationship.
The Correlation Rule Generator wizard requires that the events being used to generate a new rule include a Related CI.
Note If related ETIs and their values are not available, you can define indicator mapping rules to set indicator states (see How to search and filter CI types), and create a correlation rule for this case. You must also modify and redeploy the event forwarding policy that created the event in OM to provide a suitable ETI and value for this type of event. Next time such an event is received, an ETI is included, and the associated correlation rule is triggered.
For more information about correlation rules, see Topology-Based Event Correlation.
In the Event Browser, select the events that you want to relate, right-click one of these events, and select Relate Events from the context menu. Select one of the events as the cause event and then select Open correlation rule wizard.
Tasks
-
Open the Event Browser to display the list of known events:
Workspaces > Operations Console > <select a perspective>
-
In the Event Browser, select the events that you want to relate. You can select a maximum of 10 events.
-
Right-click one of these events and select Relate Events from the context menu.
The Relate Events dialog box opens.
-
Select one of the events as the cause event. All other events are symptoms of the selected cause event.
-
Select Open correlation rule wizard and click OK. The Correlation Rule Generator dialog box opens.
-
Click Use as Cause. All rules with the selected cause are displayed.
-
From the Select Events for Creating or Enhancing a Correlation Rule section, select additional events that are to be included in the correlation rule.
The list of possible rules that can be enhanced is dependent on the CI Type of the cause event selected.
-
Click Create to create a correlation rule based on the specified cause and symptom events, or select an existing correlation rule and click Enhance.
The Rule Properties page opens.
-
Specify the properties for a new correlation rule or make the appropriate changes to the existing correlation rule.
-
Optional. If you want the correlation rule to be enabled immediately, click Active.
-
Optional. Select an alternative time window for this correlation rule. This defines time period used to correlate events with an existing event. An event received after the time period is past is not be correlated with the original event. An alternative time window overrides the global default set in the Infrastructure Settings Manager page for Operations Management.
-
Click Next. The Rule Details page opens.
-
Optional. You can select nodes from a graph and can add additional ETIs to the rule.
-
Click Finish to create the new correlation rule or modify the existing one.
UI Reference
The Correlation Rule Generator dialog box displays the UI elements listed in the following table.
UI Element (A-Z) |
Description |
---|---|
Use as Cause: Selects the event to be used as the cause event. |
|
Open Event Details: Opens the event details for the selected event in a pop-up window. |
|
Select All Events: Selects all events in the Select Events pane. |
|
Unselect All Event: Clears all events in the Select Events pane. |
|
Create |
Enables the creation of a new correlation rule based on the selected events. |
CI Type |
Configuration item type associated with the event. |
Description |
Brief description of the correlation rule. |
Enhance |
If valid, enables the selection of an existing correlation rule to be modified. |
Event Title |
Title of the selected event. |
Include |
Enables you to select or clear events from the available list. |
Indicator |
Indicator associated with the event. |
Indicator State |
State of the indicator associated with the event. |
Name |
Internal name of the selected correlation rule. Automatically generated from the Display Name value. The first character must be a letter (A-Z, a-z) or an underscore (_). All other characters can be a letter (A-Z, a-z), a number (0-9), or an underscore (_). Can be manually overwritten. Note May be disabled for certain locales (for example ja_JP, zh_CN, ko_KR). |
Selected Events for Creating or Enhancing |
Events that you selected to be the symptoms of the cause event on which the correlation rule is based. |
Use as Cause |
Event that you selected to be the cause event on which the correlation rule is to be based. |
The Rule Properties page displays the UI elements listed in the following table.
UI Element (A-Z) |
Description |
---|---|
Active |
Used to enable or disable the rule during runtime. By default it is disabled. |
Description |
Brief description of the correlation rule. |
Display Name |
Display name of the selected correlation rule used in the graphical user interface. |
Name |
Internal name of the selected correlation rule. Automatically generated from the Display Name value. The first character must be a letter (A-Z, a-z) or an underscore (_). All other characters can be a letter (A-Z, a-z), a number (0-9), or an underscore (_). Can be manually overwritten. Note May be disabled for certain locales (for example ja_JP, zh_CN, ko_KR). |
Time Window |
Specifies a specific time period for the selected correlation rule. By default it is not enabled and the global value is used. 0 seconds also mean it is not enabled and the global setting is used. The range is from 0 to 9999 seconds. |
The Rule Details page displays the UI elements listed in the following table.
UI Element (A-Z) |
Description |
---|---|
|
Binds one or more symptoms to the cause by taking the shortest path. All other bindings are removed. |
|
Displays details of the selected CI type, including indicators and values. |
Rule Topology Pane | |
<Dark Blue background> |
Symptom CI type. |
<Light Blue background> |
Not cause or symptom CI type, but CI type is part of rule topology. |
<Orange background> |
Cause CI type. |
<Pink frame> |
Selected CI type. |
<No background color> |
CI type is not part of the rule. |
|
Indicates that the configuration item type has an indicator state that is configured as a symptom in the selected correlation rule. |
|
Indicates that the configuration item type has an indicator state that is configured as a cause in the selected correlation rule. |
|
Adds the highlighted link (constraint) to the correlation rule. Adding a link enables the path between the linked objects in the context of the correlation rule, which is a requirement for topology-based event correlation. It does not change the RTSM view model in any way. |
|
Removes the highlighted link (constraint) from the correlation rule you are editing. The link between the two objects is no longer recognized in the context of the correlation rule, and any rule that relies on this link no longer works. Removing a link from a correlation rule does not change the RTSM view model in any way. |
Layout |
Selects alternative ways of viewing the Rule Topology diagram. There are three options to choose from: |
Levels |
Selects the depth of topology levels displayed in the Rule Topology diagram. |
Zoom |
Controls the size of the displayed Rule Topology diagram. |
Symptoms and Causes Pane | |
|
Delete Item: Deletes the selected indicator from the list of indicators included in the correlation rule as either a symptom or a cause. |
CI Type |
Name of the configuration item type to which the listed indicator is assigned. |
Indicator |
Name of the indicator referenced in the selected correlation rule. |
Indicator State |
Name of the indicator state referenced in the selected correlation rule. |
Type |
Indicates if the indicator is defined as a symptom or a cause in the selected correlation rule. |
Indicators Pane | |
Refreshes the contents of the Indicators list. Use if new indicators becomes available while you are working. |
|
Group Indicator by Type: Toggles between a list containing all indicators and a list divided into health indicators and event type indicators. |
|
Add as a Cause: Sets the selected indicator state as a cause for the configuration item type selected in the Rule Topology pane. |
|
Add as a Symptom: Adds the selected indicator state as a symptom for the configuration item type selected in the Rule Topology pane. |
We welcome your comments!
To open the configured email client on this computer, open an email window.
Otherwise, copy the information below to a web mail client, and send this email to ovdoc-asm@hpe.com.
Help Topic ID:
Product:
Topic Title:
Feedback: