Question & Answer
Question
Policy for event correlation
Answer
Policy for event correlation
The event correlation policy determines if the IBM? Intelligent Operations Center identifies eventsaffecting one another due to their time or proximity.
Event correlation depends on the timeframe and location withinwhich events occur defined as follows:
- The timeframe of an event is defined by the values of the onsetdate and time and the values of the expired date and time for theevent. The default timeframe for event correlation is set to withintwo hours.
- The location of an event is defined by the latitude and longitudecoordinates and the radius of the circle of an area associated withthe event. Not all events are associated with an area and a radiusthe default value is 0. The default distance for event correlationis set to within 5 miles.
If an incoming event meets both of the correlation criteriaan alert will be generated in the Coordinator - Alerts portlet.It is possible for two or more events to meet the correlation criteria. Event correlation criteria can be configured in the IBM Intelligent Operations Center SYSPROP table. Thedistance timeframe and unit of distance can be specified.
[{"Business Unit":{"code":"BU055","label":"Cognitive Applications"},"Product":{"code":"SSMGP8","label":"Smarter Cities"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"","label":""}}]
Was this topic helpful?
Document Information
Modified date:
08 December 2018
UID
ibm10751147