Reporting on Alert Insights or Changes related to Alerts

[gxtommy]

When viewing an alert from the em_alert table, there are several tabs at the bottom of the Alert records. From what I can tell per ServiceNow documentation, these tabs are "Alert Insights": https://www.servicenow.com/docs/bundle/xanadu-it-operations-management/page/product/event-management...

My issue is that I would like to report on the information showing on these tabs, like Related Change Requests, CI Change Requests, Repeated Alerts ...etc. And I am not able to figure out how the information in these tabs are tied to the alert. I do not see a table or anything which defines the relationship between these tabs and the Alert record. Because of this, I am not able to report on the information or even create a Database view. Any information on these insights - how they work, or where their relationship to the alert is stored - would be great. I have attached a screenshot of the tabs at the bottom of Alerts which I'm referencing. 

[Vishal Jaswal · Accepted solution]

Hello @gxtommy 

Anything in the tabs within the form is Section and Anything at the botoom is related lists.
Right click on form anywhere or click Additional Actions > Configure > Form Layout

At the bottom, you will notice the section with each tab name and if you highlight one as shown below then you will see what is selected on the top right for this section.

The selected value is a Relationship which you can find by Navigating to All > System Definition > Relationships (Table: sys_relationship). By applying a filter like below, you can find out this relationship which you can customize as per your requirement.

You can also Navigate to All > System UI > Form Sections (table: sys_ui_section) to find more details for these sections as shown below:

You can always create new sections and hide which are not required via UI Policy (recommended) or via onLoad client script:

g_form.setSectionDisplay('Flapping',false);

[gxtommy]

Thank you Vishal. This was very helpful and I was able to pinpoint the origin of the Alert Insights in the sys_relationship table. Seems that it is using an EmAiInsight script include to populate the Alert Insights. I am not sure if we can use this script in reporting, but at least now I understand how the Alert Insights work.