Correlating Important Events › Advanced Event Correlation › Implement AEC › Components of a Correlation Rule › Event Pipeline Rule Components › Root Events

Root Events

You can define root events to override pipeline events. Individual root events are defined as follows:

Reset Request Event

You can configure this input event to match incoming events that trigger the rule to reset automatically, rather than waiting for the duration of the reset period.

Root Reformat Event

You can configure this output event to reformat events that matched the item if the pipeline item Reformat Matched Event is set to TRUE, and the Use Root Reformat Event flag is set to TRUE.

Root Correlation Event

This component describes the message that identifies the root cause event to be sent to the Event Console at maturity of the correlation rule.

Root Revised Correlation Event

This output event is generated to indicate that a new root cause has been identified in the following circumstances:

• The rule level Enable Revised Root Cause Event flag is set to TRUE.
• The new root cause pipeline item Use Root Revised Correlation Event flags is set to TRUE.
• The pipeline item is matched after maturity and is higher than the current root cause item.

Root Impact Event

This component describes the message to be sent to the Event Console for each of the impacted messages. This message could contain components of the root cause message as well as the impacted messages. You can also use event-by-event impact messages, or aggregate impact messaging.

Note: For more information, see Impact Analysis.

Root Reset Event

This component describes the message to be sent to the Event Console when the correlation rule is reset.

Note: For more information about resetting a rule, see Timing Parameters.

Root Request Acknowledge Event

This output event is generated to acknowledge receipt of the request to the Console if the rule has been reset using a Reset Request Event.