Event Management Modules Detail

[Akshata jamdar]

Event Management Modules Detail

Event management is basically used to monitor health of Discovered CI's in your organization. And help to take proactive action on issues related to services which your organization offers to inside user or outside user of organization.

Event management in serviceNow handles events generated in monitoring tool and take action on it. 

There are many OOTB connectors available in serviceNow to integrate with monitoring tool.

1. Connector Definitions

SolarWind, SCOM, NagiosXI, IBM Netcool, Hyperic, Zabbix, vCenter, SAP solman this are some OOTB connectors available with installation of Event Management plugin.

2.Connector Instances

This is used to set up integration of serviceNow event management and third party monitoring tool. you need to provide credentials and some important information given by monitoring tool. This information may vary from different monitoring tools.

E.g. for NagioXI you need to provide client key also.

3.Event Rules

This is most important part in event management as you need to filter out incoming event using filters in event rules. There are four tabs Event Rule Info, Event Filter, Transform and Compose Alert Output, Threshold, and Binding. 

Event Rule Info:- You need to provide details like Name, Source, Order, Description of Event Rule you want to create.

Event Filter:- You need to specify the condition for event generation from external monitoring tool. There is a checkbox namely Ignore events that matches this filter, if checked events that matches this condition will get ignore.

Transform and Compose Alert Output:- There is a right pane Event raw info this is nothing but event fields. you can customize alert fields as per requirement.

Threshold:- This tab is used to specify the threshold to generate alert according to impact and severity of that event. Which is mostly in count  or percentage.

Binding:- This tab is used to bind Configuration item (CI) with alert generated from events. Node field will matches to CI name. Override default binding  checkbox allow other to override this binding and specify new criteria.

4.Alert Correlation Rule

This provides visibility that which alert is primary and which secondary. You need to specify this using filter condition and also you can maintain there relationship type in Relationship Type choice field in it.

5.Event Field Mapping

For populating incoming information from monitoring tool to event table in serviceNow. We have to map the fields of monitoring tool's fields and event table fields. For this event field mapping is used you need to specify Source name, mapping type, from field and to field.

if this article helped you in any way then mark it helpful and bookmark it for future use also if any help required feel free to ask in comment section.

Thanks & Regards,

Akshata