Event management - Multiple Event Transform Rules
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-19-2015 06:11 AM
I can't find it documented anywhere, but it seems as though once you find a match for an event transform rule, it gets executed and then no more transform rules (even if they do match) are executed. Is this the case? If so, is there a way round it?
I'm integrating with SCOM and have a number of transform rules (all with order = 100) that set the alert severity depending on the event's SCOM Severity and Priority. This works well, but if I define an extra transform rule (with a higher Order number of 110) that matches on the node, it doesn't seem to execute. If I change the order from 110 to a lower number (say 90), it executes, but the others (with Order = 100) do not.
- Labels:
-
Integrations
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-12-2018 07:41 AM
How do you show the event rule that was used to process each individual event or alert? It seems that there should be a related list on either the event table or the alert table, but I am not finding it.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-12-2018 07:47 AM
Never mind, i found the Event rule field on the event form. Is there a default rule that is used if no match is found?
