...
This picture illustrates the basic principles of the work of the Event Correlation engine.
ITSM Event table fields
| Field | Description |
|---|---|
| Subject | Event subject. |
| Service | Service related to this event. |
| Related CI | CI related to this event. |
| Type | Event type. Available options:
|
| State | The event state correlated with the CI state in the Incident table. |
| Monitoring state | The event state synchronized with the CI state in the AMS. Available choice options:
|
Event Rule table fields
| Field | Description |
|---|---|
| Object Count | This numeral field specifies how many ITSM Events it requires to create an incident. |
| Event Type | Event type. Available options:
|
| Debounce Period | The period between throwing an event and raising and incident, |
| Event Subject Substring | A search substring used for events searching and their binding into a set on a common basis. |
| Limit Processing Time | Select this checkbox if you need to limit the timeframes of the processing for the events. |
| Processing Period | If the checkbox Limit Processing Time was set, then you can limit this period there. |
| Service | Service related to this event. |
| Related CI | CI related to this event. |
| Set Packing |
This attribute is that events are processed like a single set. In this field, the value of the Object Count field is taken into account. |