Configuring Correlation Rules

Prerequisites

You have the following operation permissions: Set Correlation Rules.

Context

• A rule is valid only to the alarms reported after the rule is enabled.
• After the rule is enabled, the NetEco needs to analyze alarm relationships, which affects the time for reporting alarms to the NetEco.
• A maximum of 1000 custom correlation rules can be created.
• The default correlation rules can be enabled or disabled, but cannot be modified or deleted.
• If the interval between the time when an alarm is generated and the time when the alarm arrives at the NMS is longer than 5 minutes, the alarm does not match the correlation rule even if the alarm meets the conditions.
• By default, the rules are sorted by the enabled and disabled states, and the rules in the same state are sorted by update time in descending order.

Procedure

1. Choose Device Management > Alarms Management > Alarm Settings from the main menu.
2. In the navigation pane, choose Correlation Rules.
3. On the Correlation Rules page, click the Default tab. On the tab page that is displayed, check whether a rule meeting requirements exists.
   • If yes, go to 4.
   • If no, go to 5.

4. On the Default tab page, enable or disable rules as required.
5. Create a custom correlation rule.
   1. On the Correlation Rules page, click Custom and then click Create.
   2. In the Basic Information area, set the rule name, description, and whether to enable the rule.
   3. In the Alarms area, select root alarms and correlative alarms and set actions.
      • Root alarms: Alarm that causes multiple correlative alarms.
      • Correlative alarms: Alarm that is generated due to the root alarm.
   4. In the Conditions area, click Create to create a correlation rule between the root alarm and the correlative alarms.
   5. In the Other area, set the generation interval between the root alarms and their correlative alarms and the priority of the rule.

      A correlation is true only if the generation interval between the root alarm and the correlative alarm is shorter than or equal to the specified period.

   6. Click OK.

Related Tasks

• Deleting a rule: You can select a redundant rule from the rule list and click Delete to reduce the rule maintenance workload.
• Enabling/disabling a rule: You can select a rule that is not used temporarily from the rule list and click Disable. To use a disabled rule, select the rule and click Enable.
• Migrating rules: You can click Export on the rule page of the source system to export rules. Then, click Import in the target system to import the rule file exported from the source system to the target system.
• Backing up, collecting statistics on, and reviewing rules, and modifying rules in batches: You can click Export on the rule page to export rules and back up, review, and collect statistics on the rules. If you need to modify rules in batches, you can modify the rules in batches in the exported rule file. Then, click Import on the rule page to import the modified rule file.

Task Example

Scenario

When the connection of an NE is faulty, the NE reports alarm M periodically. At the same time, a large number of connection interruption alarms N are generated by this NE or other NEs because of the connection interruption. The type of alarm N is the same as that of alarm M. In this case, you only need to handle alarm M instead of alarm N. By setting a correlation rule, you can set the alarm N generated later than the alarm M to a correlative alarm.

Procedure

1. On the Correlation Rules page, click Custom and then click Create.
2. In the Basic Information area, enter the rule name.
3. In the Alarms area, set Root alarms to alarm M and Correlative alarms to alarm N.
4. In the Conditions area, click Create. Set the following condition: The occurrence time of alarm N is later than the occurrence time of alarm M. Click OK.
5. Click OK.

Result

When the occurrence time of alarm N is later than that of alarm M, alarm M is the root alarm of alarm N. In this case, choose Current Alarms from the main menu and open the Filter tab page. In the Advanced settings area, click Associated Alarm ID, and then set Operator to is in and Value to Normal alarms and Root alarms. After the query is started, the correlative alarm N is not displayed in the current alarm list. You only need to handle the root alarm M.

Parameter Description