Why does my Event Mapping not match an event? Why does my EventClassInstance not match an event?
Event Mappings only apply to events with no eventClass. If your event has an eventClass when it comes in, mappings are not applied. When doing event mapping, the ‘eventClassKey’ of the event must match the ‘Event Class Key’ field of the Mapping. Open the event (which likely has a class of /Unknown) and look at its eventClassKey. Make the ‘Event Class Key’ field of your EventClassInstance (the Mapping) the same. If you need to be more specific, add the rule or regex (i.e. there will be more than one mapping with the same eventClassKey). The eventClassKey is often the name of a process (it’s what is called the tag of a syslog message). See http://www.zenoss.com/community/docs/zenoss-guide/2.4.3/ch07s01.html#d4e4103 for details.
