Subgrouping project

Subgrouping allows you to maintain subgroups within a main large group in the Event Viewer.

The Subgrouping project picks up the topology details from the CEACorrelationDetails and CEAAsmDetails fields, parses them, and retrieves the information from them. It contains the following components:

Data source:

SubgroupingObjectServer - this should be updated with the ObjectServer connection details.

Services:

SubgroupingProcessService

SubgroupingProcessServiceWithoutFinalizer

Policies:

There are seven policies related to the Subgrouping project, the names of each start Subgrouping. SubgroupingJSONParser is the policy that is responsible for parsing the CEACorrelationDetail data to extract the groupName or groupTag from the data. SubgroupingProcess is the main policy that selects the children of a parent, inserts the artificial sub-parent, and calls SubgroupingSetCustomParent with the information that is needed. The other policies are helpers.

By default, the services are not running to avoid any error before the setup is complete.

Notes:

  1. As well as group finalization, the process can be used to start before the group is finalized by stopping the SubgroupingProcessService and starting the service called SubgroupingProcessServiceWithoutFinalizer.

  2. You can manually run the process for every parent using the policy SubgroupingProcessManualRun. This policy will pick every parent regardless of finalization and form the subgrouping accordingly.

  3. The logic to use the topological grouping and either groupName or groupTag is customizable. It can be changed to include more criteria. This can be done in the SubgroupingJSONParser policy.