Where can I find what triggers the sla.warning.ci.breach event?

[Rain Vaine]

Hello experts,

Does anyone of you have any experience on working on this event "sla.warning.ci.breach"? I tried searching for it in the flows, script includes, business rules and scheduled jobs. Sadly I did not find anything. 

I also cannot find any information on it in the ServiceNow documentation.

Does anyone of you have any idea on this one. 

Thanks and Regards,
Vaine

[Bhuvan]

@Rain Vaine 

Check in System Policy -> Events -> Registry

If my answer helped your query, mark it as helpful or accept solution.

Thanks,

Bhuvan

[Rain Vaine]

I know that the event is existing in the event registry, but I can't trace where is it fired. For example the other events like sla.warning.parm can be seen in this flow.

[Rafael Batistot]

Hi @Rain Vaine 

See the documentation 

https://www.servicenow.com/docs/bundle/washingtondc-it-service-management/page/product/service-level...

but, basically…

SLA sends notifications at certain events defined in the workflow editor (No flow designer)

By default, SLA notifications are sent on three occasions:

1. SLA is at 50% of the duration specified in the SLA Definition: Notification is sent to the user in the Assigned to field mentioned in the incident form and the Supported by field in the configuration item form.
2. SLA is at 75% of the duration specified in the SLA Definition: Notification is sent to the user in the Assigned to field mentioned in the incident form and the manager of the user.
3. SLA is breached: Notification is sent to the user in the Assigned to field mentioned in the incident form and the manager of the user.