Does CMDB alert group/correlation consider Service map based data

SNExploreGuru
Tera Expert

Hi,

ServiceNow have CMDB based alert grouping option, does it group/correlate the alerts related to CIs of a Application Service?

For example,

I have a sample application service( refer below pic), will ServiceNow correlate and group the alert related to DALWAP251, DALWAP254, DALWAP0139 into one CMDB group?

find_real_file.png

1 ACCEPTED SOLUTION

Not applicable

Hi @Guruprasad DS ,

The answer is NO for you !! CMDB groups are formed based on 3 ways. See if your requirement fits.

Details as below.

CMDB Alert Grouping.

  • CMDB Alert Grouping is based on Topology. For CIs without historical data, alerts are correlated based on those CIs relationships in the CMDB.
  • This feature can be enabled by setting "sa_analytics.agg.query_cmdb_correlation_enabled" property to true.
  • There are 3 different mechanisms used to form a CMDB group.

    • Applicative Flow 
    • Suggested Relationship
    • Metadata definition
  • Applicative Flow 
    • This is based on Business Service nodes.
    • It is controlled using property "sa_analytics.applicative_flow_rc_enabled"
  • Suggested Relationship
    • This is based on the Suggested relationship table.
    • It is controlled using property "evt_mgmt.related_cis_use_suggested_relations_rules"
  • Metadata Definitons
    • This is based on the Hosting/Containment IRE Rules.
    • It is controlled using below properties:

      evt_mgmt.related_cis_use_hosting_rules ā€“ control on group hosting rules (true/false) 
      evt_mgmt.related_cis_use_containment_rules - control on group containment rules (true/false)

  • The nodes grouped together should be related by a number specified in property sa_analytics.agg.query_cmdb_graph_walk_nodes. It means we can reach one CI to another by not more than walk_nodes hops/levels/neighbors value specified. 

Here are the Alert group types :https://docs.servicenow.com/bundle/sandiego-it-operations-management/page/product/event-management/c...

Mark my answer correct & Helpful, if Applicable.

Thanks,

Sandeep

View solution in original post

3 REPLIES 3

Not applicable

Hi @Guruprasad DS ,

The answer is NO for you !! CMDB groups are formed based on 3 ways. See if your requirement fits.

Details as below.

CMDB Alert Grouping.

  • CMDB Alert Grouping is based on Topology. For CIs without historical data, alerts are correlated based on those CIs relationships in the CMDB.
  • This feature can be enabled by setting "sa_analytics.agg.query_cmdb_correlation_enabled" property to true.
  • There are 3 different mechanisms used to form a CMDB group.

    • Applicative Flow 
    • Suggested Relationship
    • Metadata definition
  • Applicative Flow 
    • This is based on Business Service nodes.
    • It is controlled using property "sa_analytics.applicative_flow_rc_enabled"
  • Suggested Relationship
    • This is based on the Suggested relationship table.
    • It is controlled using property "evt_mgmt.related_cis_use_suggested_relations_rules"
  • Metadata Definitons
    • This is based on the Hosting/Containment IRE Rules.
    • It is controlled using below properties:

      evt_mgmt.related_cis_use_hosting_rules ā€“ control on group hosting rules (true/false) 
      evt_mgmt.related_cis_use_containment_rules - control on group containment rules (true/false)

  • The nodes grouped together should be related by a number specified in property sa_analytics.agg.query_cmdb_graph_walk_nodes. It means we can reach one CI to another by not more than walk_nodes hops/levels/neighbors value specified. 

Here are the Alert group types :https://docs.servicenow.com/bundle/sandiego-it-operations-management/page/product/event-management/c...

Mark my answer correct & Helpful, if Applicable.

Thanks,

Sandeep

SNExploreGuru
Tera Expert

Thanks a lot Sandeep Dutta for detailed explanation with config pointers.

Can you please guide me how and where we can set the above mentioned properties?

 

Regards,

Guru

Not applicable

Hi @Guruprasad DS ,

Glad to see my answer helped you, Kindly mark the answer as Correct & Helpful both such that others can get help.

you can get these properties in the sys_properties table only.

Just type in the app Navigator sys_properties.list

For example:

find_real_file.png

Thanks,
Sandeep