You can archive related events by archiving the related
events group.
About this task
When you believe that events within a related events group
are no longer relevant, you can archive that group. Complete the following
steps to archive a related events group.
Procedure
- To archive a related events group within the View Related Events portlet,
complete the following steps.
- Within the View Related Events portlet,
select the New, Watched, Active,
or Expired tab.
- In your chosen tab, within the Group table select an event group and
right-click. A menu is displayed.
- From the menu, select Archive.
- To archive a related events group within the Related Event Details
portlet, complete the following steps.
- Within the View Related Events portlet,
select the New, Watched, Active,
or Expired tab.
- In your chosen tab, within the Group table select an event group or within
the Event table select an event, and right-click. A menu is displayed.
- From the menu, select Show Details, a Related Event Details
portlet opens.
- Within the Related Event Details portlet,
in either the Events or Correlation
Rule tab, select Archive. A success
message is displayed.
Results
The related events group moves into the Archived tab
in the View Related Events portlet.
What to do next
Within the Archived tab, from the list of archived groups you can
select a group and right-click. A menu is displayed with a choice of tasks for your selected group.
- If you want to move a group out of the Archived tab and into the
New tab, from the menu select New. A number of actions
can be performed with groups and events within the New tab, see Work with related events.
- If you want to delete a related events group from the system, from the menu select
Delete. This is the only way to delete a related events group from the
system.