In addition to the current ElementState defined values:
- Active = 1
- Deleted = 6
- Error = 10
- Hidden = 2
- Masked = 12
- Paused = 3
- Restart = 11
- Stopped = 4
- Undefined = 0
is there a new value describing the element state "swarmed".
The purpose is to detect(Correlation rule) when a specific element is swarmed and run some automation.
Souhail Boucif [SLC] [DevOps Member] Selected answer as best
Hi Souhail,
Maybe you can trigger on the information event that is generated during a swarm action?
Your correlation rule should then be configured to accept information events and filter on the swarming parameter like this:

I also let it trigger on single events. Hope this helps?
Souhail Boucif [SLC] [DevOps Member] Selected answer as best