Event Rule Not Generating Alert

[juriggs]

I have just begun configuring event management and am having a problem getting my event rule to generate an alert.

My event comes in from some networking equipment. It does NOT have a severity value. My understanding is that this is required, so in my Event Rule, in the Transform and Compose Alert Output section, I put in "Info" as static text.

When I create the test event, I can see that the event rule is being applied because in the Processing Notes it shows "Event rule applied: iDrac". But when I go to "All Alerts", no alert is being generated.

I'm probably missing something simple here... any help would be appreciated.

[dbehnood · Accepted solution]

In Transform Rules, you have to put the numerical value for Severity:

Critical = 1
Major = 2
Minor = 3
Warning = 4
Info = 5
Clear = 0

[juriggs]

This worked, but the value of 5 caused an error. If I set it to 3, though, the Alert gets generated. Thanks!

[Bill Meyer]

Hey Juriggs,

What is the severity and state of the event that was sent? You can find this in all events. In order for the event to be processed, the severity field will need a value. 

Also check out this. You can use Event Field mapping to map a severity. 

https://docs.servicenow.com/bundle/london-it-operations-management/page/product/event-management/con...

Thanks,