Enrichment

The enrichment engine adds information to the incoming event:

• By the raw information provided by the event itself
• Via “asynchronous” querying of an external repository
  External source APIs can be used to enrich the Canopsis repository by querying the entire database.
• Via “on-the-fly” querying of an external repository
  APIs can be used to optimize data storage by querying the repository for a specific element. Ideal for cloud applications!
  
  

Some examples of information added by the enrichment engine:

• Importance – How severe is the event?
• Impact – How many users are affected?
• Location – Where is the equipment involved?
• Others – How do I categorize a created alarm? What is the associated instruction?
  
  

Update 2025: External enrichment data

Event filter rules can be used to enrich alarms and alarm entities from an external data source.

The feature enables these to be managed from the Canopsis graphical interface.

Update 2025: Traceability of enrichments

It will soon be possible to easily view all the filtering rules applied to an alarm.

For more information on the enrichment engine and all the other features, see the dedicated article and the Canopsis documentation.