How to Enrich Events or Alerts by looking at another table?

[Ganesh Suresh1]

Hello,

Is there a way to update or enrich the event with more details from event management layer by looking at another table?

The way i'm looking here is - We are using BPPM with dynamic data table to update the events as and when they appear.
Can we do the same?

Thanks,
Ganesh

[christianmalone]

The event table should not have any extra processing adding to it. However there is a built in script which is run when tasks are created from alerts which can add a dynamic behavior- https://docs.servicenow.com/bundle/kingston-it-operations-management/page/product/event-management/task/alert-task-populator-script.html I’ve used this to look up assignment group based on cmdb field values for example. You could also put a Business Rule on the alert table but measure performance impact.

[robertgeen]

Christianmalone is correct on this but also keep in mind that you can provide a knowledge base article via and alert rule to provide further information. You may want to look at whether or not the enriched information could be done in a KB article and then attached (as typically when I hear people say enriched they usually mean provide instructions for fixing or diagnosing which would be better suited for KB articles so it could be used in all your ITSM processes). Thanks.