Has anyone successfully created a breakdown to be applied to either/both the event or alert table?
Here’s what I’ve tried:
Created a breakdown source based on the cmdb_ci table. For development, I’ve added a filter condition for a specific ci item.
Created an automated breakdown using the above breakdown source, and mapped to the event table, and the node field. Within the event, the node field has the above ci item.
Created Automated Indicator for new Events, and added the above automated breakdown. When I look at scores, the breakdown and element are listed.
After running a job, looking at that the score for this automated indicator, the score is correct, but no score is visible for the breakdown element.
I’ve confirmed there should be a breakdown score by creating a normal report, with grouping, and a count/score is indicated.
I’ve also tried everything above based on alerts, and I get the same results.
Any thoughts or suggestions?
