Non-host CI Binding in the Event Rules

[Shantanu1]

Hi Experts!

I am trying to create an Event rule for AWS SNS Alerts.

This is include creating Event Rules & the Alert Management rules to run a flow to create INCs.

I am attempting the use the "Cloud Service Account" CI in the INC, and for this I am using a Non-host CI binding as show below, but the Alerts is not getting mapped to the same CI. In the Event I see that the binding is sucessfull. Any suggestions on this would be highly appreciated!

Binding alert CI process flow:
Event CI type is cmdb_ci_cloud_service_account
Query with fields:
account_id : XXXXX
Found one matching CI. Bounding will be done with CI id: XXX
Bind to XXX

Event rule applied: AWS SNS Events

[Henrik Jutterst]

Ok, sorry if the progress here is slow, but I'd really like to help out since EM is really fun.

You answered my next question above, what the Alert looked like. So the node and configuratino item is blank...

I looked into Class Manager and it seems like you're doing correct mapping, using the "Object ID":

My next question is. What's stored in the variable you have?

If "AWSAccountId" have a correct value. then you should have a match as I see it. Can you look into the value of "AWSAccountId" and try to look it up in the CMDB?

[Shantanu1]

I am glad that you are trying to help!! I really appreciate it 🙂

So the answer is yes, This variable stores the "object_id" of the "Cloud Service Account" record (as that is one of the critieria for the CI Identification) and it is able to match it as well, as we can see from the below processing notes

Binding alert CI process flow:
Run Identification Engine. Found matching CI by Identification Engine.
Bind to 02e1059c979da5549f0f32411153afa5

Event rule applied: AWS SNS Events

But the Alert record comes up as blank 😞

[Shantanu1]

Hey @Henrik Jutterst @Ashutosh Munot1 , would be great if you guys can review this please 🙂

Thanks,

Shantanu

[pratiksha5]

Hi Shantanu, 

Can you share the screenshot's in a seq.

1)add an event screenshot once it is processed. 

2) transform and compose alert output screenshots. 

[Shantanu1]

Hi @pratiksha5 ,

Please find the attached screenshots.

In the Event Processing Notes, the Sys ID is of the exact record i am trying to bind of class"cloud service account"

Binding alert CI process flow:
Event CI type is cmdb_ci_cloud_service_account
Query with fields:
object_id : 064690451693
account_id : 064690451693
Found one matching CI. Bounding will be done with CI id: 02e1059c979da5549f0f32411153afa5
Bind to 02e1059c979da5549f0f32411153afa5

Event rule applied: AWS SNS Events
Mapping rule(s) applied: AWS Account

Thanks,

Shantanu