The services publish events that are picked up by Ceilometer. Ceilometer then could store those events in a short term event storage like Loki and then use that to trigger alarms. 

For example, Nova should emit whether a VM is down as an event, so we could fire an alarm almost instantly by using this method.

By contrast, the services might have their events disabled by default so we need to know how to enable them.