Filtering / Settings

For all rule types, select the Event Definition. Click Add to open a screen where you can select events to include in the event you are creating. This incudes a filter at the top that you can use to search for specific events. For example: Event Name Contains ________. You can then click Add Selection to include selected items in this filter, or Add All to include all displayed events. After you finish event selection, click Done at the bottom of this selection screen.

Click Add Filter to further filter the selected events. See Filter Expanded Portlet Displays for more about this feature. After you Add Filter the button changes to Clear Filter so you can remove any filter from the event rule.

Open Manage Network Manager supports multiple IP addresses per resource. During event processing, filters that include IP address criteria may behave incorrectly when Open Manage Network Manager evaluates the filter. Best practice is using resource name(s) instead of IP addresses.

The following are processing rule types, and a description of their properties.

Pre-Processing -- These rules either override the event definition, change the behavior of an event or generate another event. The following are the different subtypes. These are also called Correlation rules. See the descriptions below for additional information about the available types.

Post-Processing -- Also called Automation rules, these execute specified actions for the rule after the event processing occurs.

The following are Pre-Processing/ Correlation rule subtypes:

Device Access -- The Device Access example creates a specific device access event for user login, logout, login failure or configuration change. Select the Access Type (Config Change, Login Failure, User Login, User Logout) from the pick list for that field.

Enter the User Name Variable and/or User Name RegEx match string in those fields. This confines rule response to the selected users.

Check Suppress Correlated events if you do not want to see events correlated with this one.

Frequency Throttle -- This rule type changes event behavior based on the frequency of the selected event.

Enter the Time Period (seconds) and Maximum events to publish within time period for the event, then select an Event Action to take when throttle exceeded (Reject or Suppress the event) and check Publish frequency start and stop notifications if you want it to register for Open Manage Network Manager. If you Reject an event, it does not appear in Event history; if you Publish it, however, listeners for that event will “hear” it.

Reject Event -- This screen presents the Specify Event Filtering portion of the screen without any Settings in the lower screen. Specify events to reject with this selection and filtering.

Set Severity -- This rule overrides the default alarm severity of an event selected and filtered in the upper screen.

Set Service Affecting -- Activate this by checking the checkbox in the Settings screen. This overrides any default service-affecting settings for the impacted event.

State Flutter -- This type of rule changes event behavior on transient state change events like a series of LinkUp and LinkDown events for the same interface.

After you select the event and filtering, enter the Interval (seconds), the Action (Reject or Suppress the event) and check Publish Event if you want it to register for Open Manage Network Manager. If you Reject an event, it does not appear in Event history; if you Publish it, however, listeners for that event will “hear” it.

Suppress Alarm -- This screen presents the Specify Event Filtering portion of the screen without any Settings in the lower screen. Specify events/alarms to suppress with this selection and filtering.

Syslog --This screen presents the Specify Event Filtering portion of the screen without any Settings in the lower screen. Specify events to select. Then click Next to go to the Escalation tab.

Post-processing (automation) rules let you modify the Specify Event Filtering portion of the screen without any Settings in the lower screen. Specify events to select. Then click Next to go to the Actions tab. See Actions for more about that feature.