6.4.2 Checking detailed information about a correlation event and changing the response status

You can perform the same kinds of operations on correlation events as on JP1 events. For example, you can display event details and change the response status.

In the case of a correlation approval event, from the correlation event, you can display the correlation source event that became the trigger for its generation. If the host that generated the correlation event is different from the host you logged in to using JP1/IM - View, the correlation source event is acquired from the host that generated the correlation event.

In the case of a correlation failure event, you can display the correlation source events that were associated according to the event-correlating condition until the time when the correlation failure occurred.

If you are using the repeated event monitoring suppression function or the consolidated display of repeated events function, correlation events may be consolidated and displayed as shown below.

Table 6‒5: Example of consolidated display of correlation events
Display example	Explanation
	Correlation events have been consolidated.
	Correlation events are being consolidated.
	Correlation events that have been consolidated are deleted.
	The response status of the correlation event's consolidation start event is different from the response status of the repeated events.

In this case, to display the correlation source event, first open the Related Events (Summary) window and then open the Related Events (Correlation) or Related Events (Correlation fails) window.

Organization of this subsection

(1) Displaying correlation source events
(2) Setting a response status for a correlation source event from the Related Events (Correlation) or Related Events (Correlation fails) window
(3) Deleting correlation source events from the Related Events (Correlation) or Related Events (Correlation fails) window

(1) Displaying correlation source events

This subsection explains how to display correlation source events. For details about how to view events that are consolidated and displayed, see 6.1.2(1) Displaying consolidated events in the events list.

On each page of the Event Console window, select one correlation event from the events list.
In the Event Console window, from the View menu, choose Display Related Event List.^#
- If the correlation event that you selected in the previous step is a non-consolidated event:
  
  The Related Events (Correlation) or Related Events (Correlation fails) window opens and lists correlation events. The next step is not necessary.
- If the correlation event that you selected in the previous step is a consolidated event:
  
  The Related Events (Summary) window opens. Proceed to the next step.
#

You cannot select this menu command when multiple JP1 events are selected from the events list.
If the Related Events (Summary) window opens in the previous step, select one correlation event from Related Events, and from the popup menu that opens when you right-click the mouse, select Display Related Event List.

The Related Events (Correlation) or Related Events (Correlation fails) window opens and lists correlation source events.

To Page Top

(2) Setting a response status for a correlation source event from the Related Events (Correlation) or Related Events (Correlation fails) window

This subsection explains how to set a response status for a correlation source event from the Related Events (Correlation) or Related Events (Correlation fails) window. This operation assumes the following:

The JP1 user who logs in to JP1/IM - Manager has JP1_Console_Admin permissions or JP1_Console_Operator permissions.
If the response status is being set from the Search Events page, the search results must be from a logged-in manager.

Follow the procedure in 6.4.2(1) Displaying correlation source events and display the correlation source event for which you wish to set a response status.
From Related Events, select the correlation source event for which you wish to set a response status.

Note

You can also set a response status for a correlation event by selecting a correlation event from Display Items.
Right-click the selected correlation source event, and from the popup menu that opens, select the response status you wish to set.

The response status is set for the correlation source event.

Note

Even if you change the response status of the correlation event to be displayed in the Related Events (Correlation) or Related Events (Correlation fails) window, the response status of the correlation source events displayed in the list does not change. Likewise, even if you change the response status of the correlation source events displayed in the list, the response status of the correlation event to be displayed does not change. This is because correlation source events and correlation events express different phenomena.

To Page Top

(3) Deleting correlation source events from the Related Events (Correlation) or Related Events (Correlation fails) window

This subsection explains how to delete correlation source events from the Related Events (Correlation) or Related Events (Correlation fails) window. This operation assumes the following:

The JP1 user who logs in to JP1/IM - Manager has JP1_Console_Admin permissions or JP1_Console_Operator permissions.

Follow the procedure in 6.4.2(1) Displaying correlation source events, and from the Severe Events page, display the correlation source event you wish to delete.
Make sure that the content displayed in Display window: of the Related Events (Correlation) or Related Events (Correlation fails) window is either of the following:
- Severe Events
- Severe Events - Related Events (Summary)
From Related Events, select the correlation source event you wish to delete.

Note

You can also delete a correlation event by selecting a correlation event from Display Items.
Right-click the selected correlation source event, and from the popup menu that opens, choose Delete.

The correlation source event is deleted.

The deletion operation here merely deletes the correlation source event from the window, but does not delete it from the event database or the integrated monitoring database. Likewise, the deletion information is not applied to other pages of the Event Console window.

To Page Top