Depending on which event type(i.e. MSG,CMD,EOJ,SEC USS,etc...) With the corresponding OPSLOG columns Event,RULE, and COUNT displayed:
Evn Ruleset.Rulename CN ----+--- MSG OPS.ACTNMSGS 01 GSVX014I MSG OPS.OPERWTO 02 GSVX014I
Locate this (MSG or any) event type to see what rule is firing on the MSG event. If COUNT > 1,
then you can set the RULETRACE parm via OPSVIEW 4.1.1 to YES, then redrive the process that issued the event type(i.e.MSG,CMD,EOJ,SEC USS,etc...) to the system. After redriving the process, jump back to RULETRACE parm and set back to NO, to avoid excess OPSLOG traffic.
Then locate the Event type for the process that you just re-drove. With RULETRACE=YES you would see an OPSLOG entry for each and every rule (number of COUNT field) that processed that particular event type. You can then drill down on the rule.