Owner's Manual

Events, Rules and Actions 827
Event Definition Editor
This screen lets you edit the selected event’s definition.
Figure 34-10. Event Definition Editor - General
This has the following panels:
• General
• Correlation
Event or Alarm correlation means locating existing alarms relevant to a new alarm and making the
appropriate updates. If an event is suppressed, then the application performs no alarm correlation.
Alarms only correlate if they are for the same entity. By default, a new alarm correlate only against
existing alarms for the same event type. You can augment the scope of existing alarms affected by a
new alarm by adding correlated events in these screens. To further refine the alarms affected, you
can correlate based on key bindings to an event definition. All event data indicated as a key binding
must match for alarms to correlate.
NOTE:
You can arrange for alarms from a device to only correlate if they come from, for example, a specified
port.
Once a new alarm correlates to an existing alarm, the existing alarm is either closed or its count
increases incrementally. Several factors have an impact on this behavior. Generally, the count of an
existing alarm only increments for a new alarm of the same type, same message, and same key
variable bindings.
The following describes the details in these panels