Have to match one condition base on the events which is receiving the from device
"If the Event message content the message “Serial1” in the ifDescr variable generate the new events , can you help what event rule need set the event correlation?
Event which is receiving from the devices
A(n) {t} device, named {m}, has detected a Communication Link Down. ifIndex = {I 1}, ifAdminStatus = {T ifAdminStatus 5}, ifOperStatus = {T ifOperStatus 6}, ifDescr = {S 3}, ifType = {S 4}.
Additional Variables:
sysObjectID = {o 7}
sysName = {S 8}
locIfReason = {S 9}
ifReasonForStatusCes = {T ContIFReasForStat 10}
ifPhysLocationCes = {T ContIFPhysLoc 11}
ifPhysRelPosCes = {I 12}
ifIpAddrCes = {O 13}
ifNameCes = {S 14}
ifTunnelRemoteIpAddrCes = {O 15}
ifName = {S 16}
ifAlias = {S 17}
usdSnmpTrapTrapSeverity = {T UsdTrapTrapSeverity 18}
A(n) Rtr_Cisco device, named SCB_MLY_WSI_VR01.SCB.com, has detected a Communication Link Down. ifIndex = 97, ifAdminStatus = , ifOperStatus = , ifDescr = Serial1/1:28, ifType = 22. Additional Variables:
{S 3}