Creating a scope-based grouping policy

Create a scope-based grouping policy to select specific events from your supported data sources and to enrich the ScopeID value, through specification of conditions in the policy.

Before you begin

Ensure the following prerequisite's are in place.

• Install or upgrade to Tivoli Netcool/OMNIbus V8.1 fix pack 17.
• Complete the steps in the Tivoli Netcool/OMNIbus topic Installing scope-based event grouping, see https://www.ibm.com/support/knowledgecenter/en/SSSHTQ_8.1.0/com.ibm.netcool_OMNIbus.doc_8.1.0/omnibus/wip/install/task/omn_con_ext_installingscopebasedegrp.html. For each configured data source in the Web GUI, run the script extensions/eventgrouping/objectserver/scope_event_grouping_aggregation.sql.

About this task

As Administrator, with the user role ncw_admin role, complete the following steps to create a scope-based grouping policy for Event Analytics. If incoming events from selected data sources match event conditions specified in this policy, then the policy takes specific action to update the ScopeID for those events.

1. Log in to the Dashboard Applications Services Hub.
2. In the Dashboard Applications Services Hub navigation menu, go to the Insights menu item. A drop-down menu displays.
3. From the Insights drop-down menu, select Scope Based Grouping. The Scope Based Grouping portlet displays.
4. In the Scope Based Grouping portlet, select Create policy. The portlet displays the policy preferences to be specified for the new policy.
5. For the Policy name preference, enter the name of your policy.
6. For the Description preference, enter text to describe the purpose of your policy.
7. For the Priority preference, select the priority of the policy to a value between 1 - 14. The lower the number, the higher the priority.
8. For the Datasources preference, select the check box for each data source from which you want to consider incoming events. The data source options that are listed in this view are configured by the procedure outlined in Event Analytics Configuration.
9. For the Events preference, select one of the following options.
   • All events. This preference doesn't specify any event conditions. If you select this preference, the policy takes an action on all events.
   • Specify conditions. This preference allows you to specify one or more event conditions. If you select this preference, then the policy takes an action on the events that match the conditions. To use more than one condition use the toggle buttons AND, OR. For each condition, select an attribute and an operator entry from the related drop-down menus and enter a value.
10. For the Action preference, select event attributes. The policy takes action and updates the event ScopeID field with the value of event attributes that you select. In the ScopeID field, the attribute values are separated by a colon. To resort the ordering of an attribute, select the overflow menu option for that attribute.
11. For the Fixed time preference, select a fixed time window or configure a quiet period.
12. For the Enabled preference, select off or on.
13. Select Save.

What to do next

To edit any policy conditions, you must modify the policy and re-save the policy. To edit or delete a policy, the configured data sources in the policy must be up and running. If any configured data source is out of service, then you cannot edit or delete that policy.