Implementation Guide › Installing CA User Activity Reporting Module › Installation Troubleshooting › Import Correlation Rule Files

Import Correlation Rule Files

Symptom:

During installation, the CA EEM server did not successfully import the correlation rule files. Correlation rules allow you to identify patterns of events that require investigation. You can import correlation groups or rule themselves.

The shell script mentioned in the procedure that follows is automatically copied to the named directory during installation.

Solution:

Import the correlation rule files manually.

To import correlation rule files

1. Access a command prompt on the CA User Activity Reporting Module server.
2. Log in with the caelmadmin account credentials.
3. Switch users to the root user with the following command:

   su -
   

4. Navigate to the directory, /opt/CA/LogManager/EEM/content.
5. Execute one of the following commands:

   ./ImportCALMCorrelationGroups.sh
   

   The shell script imports correlation rule groups.

   ./ImportCALMCorrelationRules.sh
   

   The shell script imports the correlation rule files.