Event Enrichment
Event enrichment is the process of adding important attributes originated from Iotellect internal resources or external systems to an event instance. Each event instance may have unlimited number of enrichments each of those is described by a name string and a value string.
In contrast to event acknowledgements, enrichments are usually generated by Iotellect components and external systems, not by humans.
![]() | Example: Iotellect is often integrated with Service Desk systems so that a trouble ticket is created in the Service Desk upon Iotellect alert. An external Service Desk system may enrich alert event instances with numbers of those trouble tickets so that Iotellect operators will be able to quickly identify a ticket associated with an alert. |
Event enrichments are associated with a certain instance of event, not its type. Each event instance can be enriched immediately after its creation or later at any time.
The enrichments can be browsed in Event Log:
Enable Enrichments column in the event filter setting to see enrichments of all events.
Right-click on an event and select View Enrichments to browse detailed information about enrichments of a particular event.
Newly created event instances can be automatically enriched by Iotellect Server. See Enrichments section in Event Processing Rules article for more information.
Event Enrichments Table
Event enrichments table can be referred from diverse event filtering expressions. It has the following format:
Field Name | Field Type | Notes |
name | String | Enrichment name. The name can contain only English letters, numbers, and underscores. |
value | String | Enrichment content. |
date | Date | Enrichment timestamp. |
author | String | Username of enrichment creator. |
Standard Enrichments
The below table contains enrichments that may be automatically added by the platform:
Enrichment Name | Description |
---|---|
firstOccurrence | Contains date/time of the first occurrence of an aggregated event, i.e. an event for that one or more duplicates were later found. Enrichment value is event’s first occurrence timestamp converted to a millisecond-precision string while enrichment’s date is a timestamp-type value of the first occurrence date/time. |
Was this page helpful?