CI and Assignment Group from Alert not reflecting on Incident in Event Management

SwethanaB
Tera Contributor

Hello,

 

We are facing an issue in Event Management where the Configuration Item (CI) and Assignment Group values are correctly getting populated on the Alert, but they are not being carried over to the Incident created from the Alert.

We have configured:

  • Event CI Override
  • Event Group Override

using Metric Name (Alert) and Type (Event Override) for matching. The expected CI and Assignment Group are successfully applied at the Alert level; however, the Incident is still being created with different or incorrect values.

Because of this, the correct auto-assignment rules are not triggering, as the Incident does not have the expected CI.

Could anyone help identify:

  • Why the CI and Assignment Group from the Alert are not propagating to the Incident?
  • What controls or overrides the mapping between Alert → Incident in this case?

Any guidance or suggestions would be helpful.

1 REPLY 1

Mark Manders
Giga Patron

Why are you copying the assignment group when you have assignment rules in place? 

How are your alert rules configured? Are the values you do get related to the CI in any way, or to be found somewhere from Event to CI? Do you have dependencies on Incident level that override the mechanism from alert that also apply here?


Please mark any helpful or correct solutions as such. That helps others find their solutions.
Mark