The new aggregated event (primary event) is generated with the event details specified while creating the correlation policy. 

The following image displays an example of how an aggregated event appears on the Events page.

The individual matching events used for aggregation are no longer displayed on the Events page. Instead, these events are displayed as related events (secondary events) in the event details of the primary event.

You can access the related events by clicking the number displayed in the aggregated event message. The number represents the count of events that were combined to form the new aggregated event. This count can increase as the matching events increase, until the correlation time window lapses. If an aggregated event closes within the time window, a new aggregated event is generated for matching events and displayed on the Events page. If you close the primary event either through the close event operation or from the event policy, the secondary events close after a delay of 10 minutes. Similarly, if you close secondary events either through the close event operation or from the event policy, the primary event closes after a delay of 10 minutes. If you delete a related (secondary) event, the event count in the aggregated (primary) event does not change. The system processes aggregated events as new events by using the event processing phases. 

If you delete aggregated (primary) events that are closed, you can view related (secondary) events that are closed by searching them as they are not directly visible on the Events page.

Important

If you want to close and delete all secondary events and want the primary event to auto-close, perform one of the following actions:

• Close all secondary events, wait for 10 minutes, and then delete the secondary event.
• Close the primary event directly and delete the secondary event.

The aggregated events are also displayed as situations on the  BMC Helix AIOps  console. Also, the event status is synced into  BMC Helix AIOps . For more information, see  Monitoring and investigating situations.