The logic is that the Event Stream action is the default action to be taken
with all events that are processed through the rule, unless you do something
to change that in the rule.  So, you would set it to pass if you intend to
pick certain traps to BLOCK and let all others be forwarded; you would set
it to block if you intend to specifically pick those to FORWARD and forget
about the others.  The latter is much more common.

Hope this helps,

Rob


-----Original Message-----
From: Discussion of IBM NetView and POLYCENTER Manager on NetView
[mailto:NV-L AT UCSBVM.UCSB DOT EDU]On Behalf Of Fabio Zuffranieri
Sent: Thursday, September 16, 1999 8:30 AM
To: NV-L AT UCSBVM.UCSB DOT EDU
Subject: rules


I don't understand why creating a rule with the event stream set on pass and
then an event attribute and a forward, any kind of event are forwarded. Why
the
event stream has to be set on block?


Fabio Zuffranieri
IBM Global Services-PSS Tivoli Service Unit
Via Sciangai 53-Rome 00144-ITALY
email:Fabio_Zuffranieri AT it.ibm DOT com