CI Binding should consider Application Name along with Node from CI Identifier - Event Management

[c45345]

Hello Team,

Currently, CI binding is using default configuration of Node name matching for AppDynamics events.

Now requirement is, CI Binding should check Application Name along with Node name while mapping to Incident as we have multiple CIs with same name but with different application names.

Can you please help me on this?

Below is export of raw event data processed in ServiceNow,

<?xml version="1.0" encoding="UTF-8"?>
<unload unload_date="2024-09-17 15:02:56">
<em_event action="INSERT_OR_UPDATE">
<additional_info/>
<alert display_value="Alert2072476">6e3bb666876cd6d437058445dabb35cf</alert>
<bucket>68</bucket>
<ci_identifier>{"tier_name":"weeks-allinclusive-rate-service","application_name":"AWSPRODUCTION_spring-boot-micro-services-weeks","controller_name":"Prod AppD Cloud","name":"weeks-allinclusive-rate-service_cirspbtp04"}</ci_identifier>
<ci_type>x_apd_appdynamics_node</ci_type>
<classification>0</classification>
<cmdb_ci/>
<description>AWSPROD_Springboot_Weeks_IndividualNodehealth. AppDynamics has detected a problem with Node weeks-allinclusive-rate-service_cirspbtp04.AWSPROD_Springboot_Weeks_IndividualNodehealth started violating and is now critical.All of the following conditions were found to be violatingFor Node weeks-allinclusive-rate-service_cirspbtp04:1) AWSPROD_SpringbootMSWeeks_ARTAverage Response Time (ms)'s value was greater than the threshold 4000.00 for 20 times in the last 30 minutes.. The event url is https://wyndhamdestinations-prod.saas.appdynamics.com/#location=APP_EVENT_VIEWER_MODAL&amp;eventSumm...</description>
<error_msg/>
<event_class>Prod AppD Cloud</event_class>
<event_rule display_value="APPD_Critical_Events_Rule">686746881b2c4dd46fcc64e1604bcbc7</event_rule>
<message_key>Prod AppD Cloud_AWSPRODUCTION_spring-boot-micro-services-weeks_weeks-allinclusive-rate-service_weeks-allinclusive-rate-service_cirspbtp04_AWSPROD_Springboot_Weeks_IndividualNodehealth</message_key>
<metric_name>AWSPROD_Springboot_Weeks_IndividualNodehealth</metric_name>
<node>weeks-allinclusive-rate-service_cirspbtp04</node>
<processed>2024-09-13 05:13:03</processed>
<processing_duration>1731</processing_duration>
<processing_notes>Binding alert CI process flow:
Node will be resolved to CI id: a89923c087abce18515c0f670cbb35b1 : found by ci_identifier : {"tier_name":"weeks-allinclusive-rate-service","application_name":"AWSPRODUCTION_spring-boot-micro-services-weeks","controller_name":"Prod AppD Cloud","name":"weeks-allinclusive-rate-service_cirspbtp04"}Event CI type is x_apd_appdynamics_node
Checking for matching applications that are running on the node
No matching CI found
No related CI found for binding, alert CI will be bound to node (id): a89923c087abce18515c0f670cbb35b1
Bind to a89923c087abce18515c0f670cbb35b1

Event rule applied: APPD_Critical_Events_Rule</processing_notes>
<processing_sn_node display_value="app142140.ytz3.service-now.com:wynprod051">e15f77fcb6b0d2691407b3769118a831</processing_sn_node>
<resolution_state>New</resolution_state>
<resource>weeks-allinclusive-rate-service_cirspbtp04</resource>
<severity>1</severity>
<source>AppDynamics</source>
<state>Processed</state>
<sys_created_by>int_appd</sys_created_by>
<sys_created_on>2024-09-13 05:12:57</sys_created_on>
<sys_domain>global</sys_domain>
<sys_id>093b3aae87ec5e1458aec805dabb3525</sys_id>
<sys_mod_count>0</sys_mod_count>
<sys_updated_by>system</sys_updated_by>
<sys_updated_on>2024-09-13 05:13:04</sys_updated_on>
<time_of_event>2024-09-13 05:12:57</time_of_event>
<type/>
<u_business_unit display_value=""/>
<u_sub_bu display_value=""/>
</em_event>
</unload>

[User342536]

Hi @c45345 

In the x_apd_appdynamics_node table (AppD Node Class), you have application_name field.
Please use event field mapping strategy, to use application_name field to differentiate Cis with same name, and different apps.

Application name information, has to be sent, by AppD.
https://docs.servicenow.com/bundle/xanadu-it-operations-management/page/product/event-management/tas...

Kindest Regards,

Rodrigo Donnangelo