Policies

Policies are rules that contain multiple conditions and action sets. In IBM AIOps Insights, you can configure policies to automatically promote alerts to incidents.

Policies are created in the Policy editor, where you can build condition set.

The policies table displays all of your AIOps Insights policies that are preset or created by you and your team. You can enable or disable these policies, create new ones, and edit existing policies. When you click a policy in the table, you can see more details in the side panel. The list of policies is split by pagination, use the navigation arrows at the bottom of the table to move between the next or previous page of policies. To customize the number of rows that are displayed in the table, click the Down chevron icon beside Items per page.

Policies table columns

Policies table columns
Column	Description
Policy name	A name to identify the policy. The default name of a policy is automatically created based on the alert summary field, and specifically on the alert with the highest severity that has ocurred most frequently. To customize a policy name, point the cursor over the name and click Edit .
Order	Determines the order in which policies are executed. Execution order is set when you create your policy on a scale of 1-100. Policies with a lower number are processed first.
Tags	Tags are used to identify the different types of policies. AIOps Insights policies are tagged with the following policy types: Incident: policies to create actionable incidents from alerts to improve insights into your issue. Preset: preset policies define the core behavior of event and alert processing. Preset policies can be viewed, enabled, or disabled from the Policies table. Scope-based: policies that group alerts based on common properties and time of occurrence to identify when issues might be related. User: policies that can be edited by the user. User policies can be viewed, enabled, disabled, modified, and deleted from the Policies table.
Last modified	Displays a timestamp of the last modification to the policy. The date is expressed as month, day, year. The time is expressed as hours:, minutes:, seconds. The time also indicates whether AM or PM. For example, 3/9/2022, 4:45:17 PM. Enabling or disabling a policy, renaming or editing a policy, and adding a comment from the Journal tab in the side panel will all update the last modified time stamp.
State	Denotes if a policy is Enabled or Disabled . You can click the toggle button to change a policy state. Disabled policies do not take any action against incoming alerts. Note: Disabling preset policies will prevent some event and alert processing features from working.

For more information about policies, see the following topics: