Users Guide

Automation and Event Processing Rules | Alarms, Events, and Automation
300 OMNM 6.5.3 User Guide
Creating Event Processing Rules
There are many different types of rules you can create. As an example, the steps provided show how
to create a device access rule from the Automation and Event Processing Rules portlet. If you need
a detailed description of this portlet, the rule types, or other menu option, see
Automation and
Event Processing Rules
on page 297. Also see Filtering/Settings on page 302, Syslog Escalation
Criteria
on page 306, and Actions on page 310 for more about the differences available between
rule types.
Create a rule from the Automation and Event Processing Rules portlet as follows.
1 Right-click and then select Event Definition Override > Device Access.
The
Rule Editor is displayed.
2 Enter a name to identify the rule and an optional description.
3 Select Enabled if you want this rule to begin working immediately.
4 Click Next to specify filters.
5 Add the events to filter.
a. Click Add to show the events list.
b. Select the events you want to add.
c. Click Add Filter to further filter the selected events.
6 Click Next to specify the settings for the selected rule type.
This panel’s appearance depends on the type of rule you selected when you clicked New.
When you are editing an existing rule, it defaults to that rule’s screen. For more about the
available alternatives, see
Filtering/Settings on page 302.
The Device Access example creates a specific device access event for user login, logout, login
failure, or configuration change.
7 Select the Access Type (Config Change, Login Failure, User Login, User Logout) from the
pick list for that field.