Correlating Important Events › Advanced Event Correlation › Event Definitions

Event Definitions

Understanding event definitions is critical to understanding AEC, configuring it, and using it correctly.

You can define the two types of events in AEC: input events and output events. Input events are the events that define patterns used by AEC to match messages coming in to the Event Console. Output events are events generated by AEC and sent to the Event Console.

You define these events in the correlation rules when you configure AEC. Each event that you define has a key field, called the message string, which describes the event. The message string can contain regular expressions and tokens.