As an administrator, Event Management lets you interact with the following event types:
Normalized events are events that have been processed to use the alert properties defined in the USM schema. These events become CA SOI alerts unless you create a policy to manipulate or filter them.
Raw events are records of normalized events that still use the properties of their event source. Normalization always occurs by default but is often too generic to be useful for raw event sources. Events from raw event sources such as SNMP traps or CA NSM Event Management require a user action to normalize them appropriately to USM alert properties. You can create normalization policy for raw events that map to USM properties to facilitate faster resolution when they become alerts.
The following connectors are examples that produce raw events with only generic normalization:
You can search for normalized and raw events. See the section Event Search Syntax Guidelines and Best Practices for information about the syntax rules.
|
Copyright © 2013 CA.
All rights reserved.
|
|