Create Common Events

 You must be logged in as an Administrator to take this action.

1. On the main toolbar, click Deployment Manager.
2. On the Tools menu, click Knowledge, and then click Common Event Manager.
   The Common Event Manager appears.
3. On the File menu, click New.
   The Common Event Properties window appears.
4. In the Name field, type a name for the Common Event.

5. If this common event is to be assigned to a specific AI Engine rule, check the AIE Common Event box.

   

   By assigning common events to AIE rules, the correct MITRE tactic can be associated with alarms. Additionally, the common event field can be reused for reporting and filtering.

   Selecting the AIE Common Event box automatically adds the prefix AIE to the name of the common event, which cannot be removed.

6. Click the button to the right of the Classification field.
   The Classification window appears.
7. Select the most appropriate Classification for the Common Event being created.
8. Click OK.
9. (Optional) Enter any additional details or notes in the Brief Description field.

10. Select a Risk Rating from the range 0, No Rating, to 9, High-High.

    

    Choose a rating level that best defines the severity of the event. For example, an event describing the status of a running process could be classified as Informational and given a rating of 0. An event classified as Operations: Error would have a rating of 7.

11. (Optional) On the Associated Knowledge Base Artifacts tab, you can add Knowledge Base artifacts. Knowledge Base Artifacts externally reference additional information associated with the Common Event.
12. Click OK.