When generating a new event from an incoming event, you can prevent any duplicates of the event from getting generated during the new event creation process. You can do so with the help of a configurable create event action reset interval. The create event action reset interval does not allow create event actions to repeat over a specified period. By default, create event actions occur every time that the policy detects a criteria match. However, you can set the action reset interval to prevent duplicate actions. For example, you can set a reset interval of 90 seconds, which prevents duplicate create event actions from recurring within a 90-second window. As a result, only required events are forwarded into the system, decreasing the time that is required to interpret and resolve critical alerts. This ability also gives you more control over your event management system.
|
Copyright © 2013 CA.
All rights reserved.
|
|