Event Managment IBM Netcool - Events do not resolve after clearing in IBM Netcool

[jtitus]

Event Managment is picking up the new events from IBM Netcool. Our issue is when the events get set to the severity of "Clear" and/or the Resolution State is set to resolved, Service Now is not detecting the event state change from IBM Netcool.

What am i missing?

Here are the results from running the IBM Netcool api integration:

Event Created:

"Serial": 10581081,
"Node": "pkvplknxesm01",
"ITMStatus": "Y",
"Severity": 4,
"Type": 20,
"Summary": "pkvplknxesm01: Process DNE (*zabbix_agentd*).",
"AlertKey": "APP_Zabbix_LZ_ProcDNE"

Event Cleared:

"Serial": 10581081,
"Node": "pkvplknxesm01",
"ITMStatus": "N",
"Severity": 0,
"Type": 2,
"Summary": "pkvplknxesm01: Process DNE (*zabbix_agentd*).",
"AlertKey": "APP_Zabbix_LZ_ProcDNE"

[Prabu Velayutha]

Hi @jtitus 

Create event field mapping for IBM Netcool source, map the source "Severity": 0 with Target "Severity": 0.  Severity 0 is for the clear event, likewise there are other Severity choice values you can map the respective source and target values.

Refer the product documentation for steps and more details.

https://docs.servicenow.com/bundle/utah-it-operations-management/page/product/event-management/task/...

If my response helps to solve your issue kindly mark it as helpful & accept solution.

[jtitus]

Thank you Prabu Velayutha! I see the table in the screen shot, how do I find that table in my instance? Then I can verify the mapping is correct.

PREVIEW

[Prabu Velayutha]

@jtitus Those are choice values of Severity field in the Event Table (EM_Event). 

Follow the screenshot below Configure ->Table

Columns select Severity and open severity 

click on choices and filter en

Let me know if you have more question. 

If my response helps to solve your issue. Kindly mark it as helpful & accept solution.