After you select between pre- and post-processing rules for new rules, the following screens manage the event processing described in brief in the Create Event Processing Rules. The following screens and fields appear in this editor.
• Filtering / Settings
• Syslog Escalation Criteria (for pre-processing Syslog rules)
• Actions (for post-processing, automation rules)
Rules Referring to Subcomponents
Subcomponent names must cache on the server if you want to refer to them in rules. For example, if you want e-mail whenever a linkDown occurs on a port, then you must cache subcomponents. If you cache subcomponents, it impacts performance, which is why such caching is disabled by default.
To enable caching, set the following property in installed.properties:
...then restart application server.
The following sections describe editing rules in more detail.