Owner's Manual

Events, Rules and Actions 823
the trigger event. Otherwise it is suppressed/rejected as specified in the rule options. The
correlation events are optional. These indicate the start and end of the active filter along with total
counts processed, rejected and suppressed by the filter.
Syslog Event Processing Rule Editor
This type of event configures Syslog escalation. To enhance performance, these rules pre-screen
syslog messages rather than turning them all into application notifications / events. Syslog
messages matching the criteria configured here are escalated to become application notifications or
events which may then be further processed.
Figure 34-8. Syslog Escalation Editor