Enrichment

The enrichment engine adds information to the incoming event:

• By the raw information provided by the event itself
• Via “asynchronous” querying of an external repository
  External source APIs can be used to enrich the Canopsis repository by querying the entire database.
• Via “on-the-fly” querying of an external repository
  APIs can be used to optimize data storage by querying the repository for a specific element. Ideal for cloud applications!
  
  

Some examples of information added by the enrichment engine:

• Importance – How severe is the event?
• Impact – How many users are affected?
• Location – Where is the equipment involved?
• Others – How do I categorize a created alarm? What is the associated instruction?
  
  

Update 2025: External enrichment data

Event filter rules can be used to enrich alarms and alarm entities from an external data source.

This feature lets you manage them from the Canopsis graphical interface.

For more information on the enrichment engine and all the other features, visit the dedicated article and the Canopsis documentation.