How do I get the Business Service CI to Bind to an event/alert?

tammykuhns · ‎02-07-2019

I'm new to Event Mgmt and just starting to configure our event rules. Many of our infrastructure CIs bind with no issues. I'm struggling to figure out how to bind to a business service. I have cleared the node field and the type is now set to "cmdb_ci_service" but how do I tell it what to match on? The name of the CI is in the Description of the event.

Gianpaolo Pagan · ‎02-07-2019

Hi there,

You don't usually bind alerts directly to a business service but you might have a good reason for that.

What typically happens is that you bind alerts to servers, databases, webservers, network devices and then these CIs propagate impact to a Business Service.

additional_info is where you need to make sure you have enough information in order to match the CIs you want the binding to happen against. Have a look here for details.

additional_info contains all the additional fields that can be used for different types of logic such as correlation, binding, etc. You can create new fields in additional_info that contain the piece of information relevant to you. You wrote that the relevant information for you is in the description field, if it's part of it but not everything, then you can create an event rule that maps that piece of text to a new field in additional info.

Then the rest is driven by a binding rule where you match alerts choosing between 2 different binding types

Binding to CIs using CI identifiers
Binding using the field information obtained above with CI data either using CI attributes.

I hope this helps,

Gp

View solution in original post

robertgeen · ‎02-07-2019

Kevin,

Just out of curiosity which table did you use before? I find generally those monitoring sources won't give you the proper URL that you would want to tie back to (it's usually too indepth and detailed as you mentioned) and out of the box there really isn't a very good CI to tie it to that discovery would populate. Just curious what you have tied it back to in the past because I don't think the out of the box website table would have the URL in it it would be more like a website running on IIS.

mbrock1 · ‎02-08-2019

As you said, the node needs to be cleared.

In your event rule you override default binding, choose "CI field matching" for the binding type and "Business Service" for the CI Type. Then add a compose field "name" with the value "${description}" (the description of the raw event). This should then look up the business service with that name.

It that fails, you can try adding an additional compose field "sys_class_name" with the value "cmdb_ci_service".

If it still fails, look at the Processing Notes. There could be another field from your event that it is trying to match on causing issues.