- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-13-2023 08:40 AM
what is the best way to get SolarWinds Orion Alerts into ServiceNow EM tables.
The OOB connector fetch the events not the Alerts.
Solved! Go to Solution.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-17-2023 07:29 PM
Technically we can do any customization we want but i still feel if you requirement is of --I need to get alerts directly
Do a P2P integration where SW alerts will be Created and Incident is Spinned.
In My View Do Not Customize OOTB connector as you are not following the simple EM Process
If possible use REST API and directly POST data into em_alert table of Service Now.
Regards
RP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-13-2023 11:09 AM
Hi @Karim-hashish ,
As per my understanding there should be an event rule in place if not then needs to be created which will generate an alert using the event rule which in turn generates Incidents using alert rule.
Mark my answer helpful & accepted if it helps you resolve your query.
Thanks,
Danish
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-13-2023 11:58 AM
@Danish Bhairag2 Event rules are already in place on SolarWinds side and they are too many, managing event rules on SN side is too complex to do and maintain, I need to get alerts directly not events.
hope it makes my scenario more clear.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-15-2023 09:45 PM - edited 10-15-2023 09:46 PM
Hi Karim
Service Now Event Management layer is MoM layer (Managers of Managers) where conceptually Many monitoring tool will send events and then it will be processed into Alerts, Alerts will be correlated and then INC will be spinned.
Monitoring Tool-->Events--->Alert -----> Incident.
If you do not want to go thru this way then you can use a P2P Integration where SW Alerts will be directly creating Incident. Its done using SW Application which Sits on Service Now Instance.
Regards
RP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-17-2023 09:16 AM
Thanks @Rahul Priyadars for your answer.
Basically we need to get Orion Alerts into SNOW Event table. Do you think modifying the OOB connector would be easy and helpful in our case.