Correlating Important Events › Advanced Event Correlation › Implement AEC

Implement AEC

After you have created, deployed, and tested rules, you can put them into production. The correlation process runs unattended by deploying policy to the AEC Engine, which is installed with every Event Agent and Event Manager.

The AEC Engine runs in the background and processes the events received at the Event Console.

By default, Event Management passes all events to this Engine before doing any of its own processing (that is, message actions, writing to the log, and so forth). You can also configure AEC to process events sent directly to the console log, such as the message action SENDOPER.

Note: The Windows IDE Policy Editor processes events after they are sent to Event Console, whereas the Engine processes them beforehand. So, when AEC is configured with reformatting or suppression features, these features work only when using the Engine.