Capture unmatched events

To choose how unmatched events are handled

1. Right-click the policy and select Edit.
2. Select the Options tab.
3. In the Unmatched events group box, choose whether unmatched events are sent to the message browser, are sent to the acknowledged messages browser, or are ignored.

   NOTE:
   Each policy (except for Open Message Interface and SNMP Interceptor policies) that sends unmatched events to the management server creates a message with the default values of the policy. If several policies forward unmatched messages to the management server you could receive multiple messages from a single event.
   For Open Message Interface and SNMP Interceptor policies, the behavior is somewhat different; unmatched events create a message only if they are unmatched in all policies on the node, and only one message will be sent.

Related Topics:

• Quick start: how to create a policy