Event Management Overview › Event Management Features

Event Management Features

The Event Policy dialog in the Operations Console provides access to Event Management functionality. To access the Event Policy dialog, select Tools, Event Policies. You can do the following on the Event Policy dialog:

• Perform federated event searches on all historical events or on specific connector event sources to analyze events and detect event patterns.
• Save event searches as policies that you can access at any time to view the most recent search results.
• Create and deploy policies that detect patterns in real-time (based on historical event searches) and perform actions on events.

The robust event search system lets you track all events and deploy policies. You can then create a manageable set of actionable conditions and convert those conditions to alerts for escalation and inclusion in alert queues, if necessary. This extra layer of event processing is important to equalize the quality of event and alert data coming from the diverse set of connector sources. For example, a generic trap from the SNMP connector requires extra processing before it can be as useful as a fault alarm from the CA Spectrum connector.

Event Management provides functionality that enables the following common event actions:

• Correlation to associate related events based on any criteria
• Filtering to eliminate extraneous events and subsequently lower alert volume
• Creating new events as a result of event policies to consolidate multiple conditions into one actionable condition
• Enriching events to add vital information from outside sources
• Normalization to customize the mapping of raw events from specific connectors to the USM alert schema