Event Field mapping after transform and compose

[karanpreet]

Hello,

I had a couple of queries around the Field Mapping. We're currently on Tokyo release and I'm trying to configure Event Management but hitting a few challenges along the way.

1. If I make some changes to the event fields with Event Rules transform and compose section, are the updated fields available while creating Event Mappings? For e.g. if I update the resource field in the Transform/compose section and want to use the resource field to map another field value, will I be able to use the updated value for resource?

2. A lot of the information within the alert is contained within the additional_info field, is there a way to use these fields directly while mapping? Especially to use with single field mapping from section?

I tried going through the docs but didn't find much on these topics so I'm hoping someone has gone through and hit the same issues that I'm seeing while configuring Event Management.

Thanks,

Karan

#ITOM #EventManagement

[Rahul Priyadars]

(1) yes you can use experssions which can be used ..

(2) Refer OOTB Event rules where Additional Info data is processed. We have >100 OOTB rules.

Below event rule additional Info attribute values are used and Processed.

https://YOURINSTANCE.service-now.com/now/nav/ui/classic/params/target/%24em_event_rule_designer.do%3...

Regards

RP

[karanpreet]

Hello, 

The details above work for Event Rules, but I was more interested on using the same within Event Field Mapping. This answer doesn't seem to cover that.

[Rahul Priyadars]

Got it - Event field mapping.

Event Field  mappings apply after event rule processing and prior to alert generation

Try this 

Regards

RP

[karanpreet]

This let's me trigger the mapping based on if an event rule was triggered or not but my query is more around if I can use the fields that were updated by the event rule in the mapping.

Going back to my previous e.g. if I update the resource field in the Transform/compose section from 'X' to 'Y' and want to use the resource field to map another field value, will I be able to use the updated value for resource? i.e. trigger the Event Field mapping when the resource value is 'Y' and also, use the resource field to say if the value is 'Y' the severity should be 1, If it's 'X', the severity should be 3.