Hi Community,
We are integrating SolarWinds events into ServiceNow and already have severity field mapping in place.
Requirement:
* If the SolarWinds *Event Type* contains **5000**, the alert severity should remain as currently mapped (no change to existing field mapping).
* If the *Event Type* does **not** contain **5000**, then the alert severity should be set to **OK**.
important note:
We do not want to modify the existing field mapping logic for events with type 5000. The change should only apply when the event type does not contain 5000.
For context, the Event Type value is received as part of the event payload under **Additional Information**.
Question:
What is the best way to implement this condition in ServiceNow?
* Transform Map scripting
* Business Rule
* Event Rule / Alert Management rule
Any guidance or best practices would be appreciated.
Thanks in advance!
