how to Ignore events without severity?

Ganeshm1
Tera Guru

Hi All,

We are getting few events with severity in additional information. Since we have not done any event field mapping for these, event status is setting to error as expected. 
But I want to set the state of these events to 'Ignored'. I tried to configure event rule for the same, since severity was not mapped, event rule didn't get apply to those events. 

Is there any way I can ignore these events without severity mapping?

Thanks in advance!

 

Regards,
Ganesh

3 REPLIES 3

Ryan Zulli
ServiceNow Employee
ServiceNow Employee

When the events are erroring out due to missing Severity they are already "ignored" meaning no alert will be created - what is the point of having to ignore them again?

We want to set them ignore state instead of error for some process related purpose. 

Ryan Zulli
ServiceNow Employee
ServiceNow Employee

Then create an after business rule on em_event table to change the state from error to ignored.  We don't advise creating business rules at all on the event table, assuming the "errors" are edge cases and we're only updating one attribute it should be ok - of course test in Dev first.