Event rule"Set a threshold" parameter

[Annie11]

Hi all

Can someone pls guide me with this "threshold" feature in event rule. 

Scenario: If description contains EVENT ID 100

How to  configure alert creation,  If for a particular interval EVENT ID 100 is not generated from SCOM , then only alert should be created. If event is generated with a similar pattern , it should not create an alert

[Nitesh Alashe1]

Hello,

Basically Threshold is used where the third party tool have continuous sending alerts with same description and to avoid multiple alert to be created.

when you are configuring event rule info there is source then event filter then comes your threshold

Hope below link can help you more.

https://docs.servicenow.com/bundle/orlando-it-operations-management/page/product/event-management/ta...

BR

Nitesh

If my answer helped you in any way, mark answer as helpful and correct.

[Ankur Bawiskar]

Hi Annie,

Threshold defines the limit using which Event Management generates the alert. We can configure the properties in these tabs to create the alert, suppress the alert generation, or close the existing alert according to threshold specified in the event field.

sharing few links for reference

https://dxsherpa.com/blogs/technical-insight-into-servicenow-event-management/

https://docs.servicenow.com/bundle/orlando-it-operations-management/page/product/event-management/ta...

https://community.servicenow.com/community?id=community_article&sys_id=a9e809f4db9050dc190dfb2439961...

https://hi.service-now.com/kb_view.do?sysparm_article=KB0756800

Regards
Ankur

[Annie11]

Hello Ankur

PFB screenshot attached

As per this , for 10 events over 10 mins of time difference single alert should be generated. Please correct me If I am wrong.

[Ashutosh Munot1]

Hi,

you need to check this:

Event Management : Event Rule Components and their Usage

I have explained this in detail.

Thanks,
Ashutosh