Review imported rules for Event Management

After the automatic or manual import of rules and events that were on your instance with the Helsinki release, confirm that the event rules will process properly and that events are not missing.

Before you begin

Role required: evt_mgmt_admin

About this task

Review each event rule and confirm that the value processes events properly. You can delete extraneous rules as necessary.

Procedure

  1. Confirm that all the Threshold Rule [em_threshold_rule] table records were moved to the Event Rule [em_match_rule] table.
    If there are any rules in the Threshold Rule table, recreate them in the Event Rule table.
  2. Navigate to Event Management > Rules > Event Rules and confirm that each rule has the appropriate threshold and filter values.
    Update the event rules as necessary. For example:
    Table 1. Verify these rules from the Helsinki release
    Rules to correct How to correct
    A transform and a threshold rule applied to the same kind of event. Only one rule can apply to an event. The import script generates a transform and a threshold rule for the same kind of event.
    1. Click the event rule that contains the Event Match fields for the transform.
    2. Select the Threshold rule check box and add the threshold metrics.
    3. Delete the extra threshold rule generated by the import script.
    An ignore rule ran prior to a transform rule for the same kind of event. The ignore information applies after the transform Event Match fields.
    1. Click the event rule that contains the Event Match fields for the transform.
    2. Click the Ignore check box.
  3. Navigate to Event Management > All events and confirm that no events from the previous release are missing.
  4. If events are missing, resend or manually create them.