Set Alert Tag Using Script

[Matt Spiewak]

Is it possible to set an alert tag using the event field mapping type "Advanced mapping using script" or through any other scripted approach in the platform? We have some use cases where we need to do more than just a regex field extraction to get what we want for an alert tag. The advanced mapping using script type of event field mapping allows for us to get that value but I don't see a way or know what the syntax would be to set that value as an alert tag. Has anyone else accomplished this?

[User342536 · Accepted solution]

Hi @Matt Spiewak 

Using advanced scripts can affect event processing performance,

In this case, if you use advanced scripts, the maintenance can be a issue. Imagine the logic in script, to check which tags and values will be define? Also, if new monitoring solutions are in place, new tags/values should be reviewed in the script.

Some tips on alert tags:

1- Please establish a pattern, and define which tags/values are expected

2- Work with monitoring teams (different solutions), aligning these tags

3- Check with monitoring teams to send this tags, if using custom/push connectors

4- Use Enrich Automation (https://www.servicenow.com/docs/bundle/xanadu-it-operations-management/page/product/service-operatio...), to add new tags to the alerts.

5- Use t_<tag> to define the tags.

The alert tags are defined in additional information field, in the format: {"<t_tag_name>":"value"}.

Please check the screenshots I attached.

Please mark helpful, if this answer helped you!!!

Kindest Regards,

Rodrigo Donnangelo