I created a policy statement for the logger policy set. I supplied a few events but I did not supply any selection conditions (no users etc). Why did I receive so many records?

book

Article ID: 7836

calendar_today

Updated On:

Products

CA Compliance Event Manager

Issue/Introduction

When I created a policy statement for logger I did not enter any selection conditions.

I was going to add some users as time progressed but the policy statement was initially added without any users.
I was expecting this to be dormant until I added users.

When I activated the policy statement I found that ALL USERS were reported on rather than none. 

Environment

Release:
Component: CEVM

Resolution

The selection criteria for logger policy statements is first to identify the EVENTS that you are interested in, then you select the test conditions to LIMIT the number of records to be selected, and then you select what action to perform for these events. 


If you do not select any limiting conditions, you will collect ALL occurrences of the event.