The Alarm Analysis event sink is where import rules are configured.

Events are processed in a strict FIFO (First In - First Out) sequence. During this phase, the event is parsed purely on the content of the individual record. However, there is a secondary phase called “Cross Data Updates” which works on a wider context by consulting historical data.

Cross Data Updates include the following functions…

Cross Data Functions incur processing overhead and should only be enabled if required.