Enrichment

The enrichment engine adds information to the incoming event:

• By the raw information provided by the event itself
• Via “asynchronous” querying of an external repository
  External source APIs can be used to enrich the Canopsis repository by querying the entire database.
• Via “on-the-fly” querying of an external repository
  APIs can also be used to optimize data storage by querying the repository for a specific element. Ideal for cloud applications!

Here, for example, is some information that the enrichment engine can add:

• Importance – How severe is the event?
• Impact – How many users are affected?
• Location – Where is the equipment involved?
• Others – How do I categorize a created alarm? What is the associated instruction?

 Update 2025: External enrichment data

Event filtering rules now enable alarms and alarm entities to be enriched via external data sources.

The feature enables these to be managed from the Canopsis graphical interface.

Update 2025: Traceability of enrichments

It will soon be possible to easily view all the filtering rules applied to an alarm.

For more information on the enrichment engine and all the other features, see the dedicated article and the Canopsis documentation.