Administration Guide › Suppression and Summarization › Suppression and Summarization Rules Tasks

Suppression and Summarization Rules Tasks

Suppression and summarization rules let you control your event flow and manage event log store size by eliminating or combining certain events. Suppression rules prevent native events that match their qualifications from being recorded at all. Summarization rules combine multiple native events into a single refined event, which appears instead of the original component events.

Important! You should create and use suppression and summarization rules cautiously since they can prevent the recording and appearance of certain native events. We recommend testing custom suppression and summarization rules in a test environment before deploying them.

Suppression and summarization tasks can all be carried out from the Log Collection area of the interface. You can create, edit and delete custom suppression and summarization rules.

More information:

How to Create a Suppression Rule

How to Create a Summarization Rule

Apply a Suppression or Summarization Rule

Copy a Suppression or Summarization Rule

Edit a Suppression or Summarization Rule

Delete a Suppression or Summarization Rule

Import a Suppression or Summarization Rule

Export a Suppression or Summarization Rule