I have a confusion about event rules and mapping rules creating alerts

[DrewW]

We have started using Event Management and its been a really long time for me and I'm getting the following and people are asking if it can be prevented and I cannot find anything that indicates I can change it.

We have an Event rule for solarwinds that should create an alert when a server is down.  We then created a mapping rule to map the fields.  The issue is that we keep seeing the following in the Processing Notes field.

No event rule applied
Mapping rule(s) applied: solarwinds-icon-severity

So an alert is being generated even when there is no rule that applies because there is a mapping rule.  How do I prevent these alerts from being generated?  If there is no event rule that applies I do not want an alert, even if the system thinks it should create one using the mapping rules.

Please and thanks....

[Harsh3]

so there is an OOB rule which created an alert event if no event rule is defined for that source.
you have to create an event rule for solarwinds and if you have it already check the filter condition you have put. Also do check the order of event rule.

[DrewW]

We have done this, this is why I'm confused.  Its not the event rule that is creating the alert, its the Mapping rule that is doing it.  Its even logging a message to that affect.  So how do I prevent a Mapping rule from triggering an alert?

[Ryan Zulli]

Not sure if you've received a response yet - however, default OOB behavior for Event Management is to create an alert as long as we have a valid Severity. 

[DrewW]

So how do we make it so it only creates an alert when there is an applicable Event Rule.  We would like ONLY event rules to cause alerts to be created.  Right now both Event rules and Mapping rules are causing alerts to be created.