Security Incident Response Task not triggering notifications on State update

[gthapa]

Hello Community, I have a Security Incident Task change notification in place which triggers on event named- "sn_si.TaskAssigned". But for some reason the notification would not trigger anytime I make a change on the SIT state, or Priority or even change the Assigned_to user. Can someone help me with this requirement?

[RaghavSh]

@gthapa Do you see the event triggered in event logs?

Also the assignment group and assigned to should have valid values , means the users should have valid emails

Please mark the answer correct/helpful accordingly.

[gthapa]

Hello @RaghavSh - I do not see any events triggering in Event logs.

[kaushal_snow]

@gthapa ,

please check whether the event name you’re using is actually being queued (you can check System Logs > Events to see if your sn_si.TaskAssigned appears), and if not you’ll need a Business Rule or Flow on the sn_si_task table that fires gs.eventQueue('sn_si.TaskAssigned', current, current.sys_id, current.assigned_to) after a record update so that your Notification (set to When: Event is fired with that event name) can trigger properly, plus ensure the notification conditions, recipients and user email fields are all valid (for example that the user is active and has a correct email address) for notification engine to process it.......

If you found my response helpful, please mark it as ‘Accept as Solution’ and ‘Helpful’. This helps other community members find the right answer more easily and supports the community.

[gthapa]

So, I did some modification on the Evernt registration for my notification and applied event(queue) scripting in the Business Rule  to apply with condition when assigned_to.name changes OR State is one of Close complete or cancelled. But I am not receiving any email notifications or any updates on System logs > Events. There is a scope error message pops up when I change the State of my Security Incident task (SIT) record to - Close complete.
Error- "Error Message

Access to event 'sn_si.SIT Update' from scope 'Security Incident Response' has been refused. The event is not defined."