In alerts list (em_alert) could see some of the alerts are having empty CI means they are not binded to any CI
An initial review of this, shows that most of these are related of alerts coming from one source alerts, which are not related to any Configuration Item. This causes ServiceNow to capture the 'node' field of the alert and consider it an 'object' towards the licenses count. and have also gone through em_unique_nodes table to check the license usage and could see the type as unknown
Please suggest a fix to resolve this or root cause of this issue, could you please help why those particular alerts are having empty CI's
Reason for failure could be 1. source node is not a hardware CI in which case try using other types of binding options such as CI identifier or CI field matching
2. If there are duplicates binding will fail
Event record processing notes shud tell the cause for failure.
I tried using the CI identifier or CI field matching. However it is asking me to select a CMDB table name, however those node names are not part of any CMDB table, how can I create the event rule for CI binding ? Please suggest.
