Create an alert clustering definition

Define alert clustering conditions to trigger one or more alert clustering tags, which help create alert groups from fewer alerts. Creating alert groups from fewer alerts reduces noise, making it easier to identify critical incidents, prioritize responses, and manage issues effectively.

Avant de commencer

Role required: evt_mgmt_admin

Pourquoi et quand exécuter cette tâche

To create a tag def users need to use filter to define on which alerts the definition will apply and define a grouping criteria by specifying which field values should be compared to create a group.

Procédure

1. Navigate to All > Event Management > Tag Based Alert Clustering Engine > Alert Clustering Definitions.
2. Select New.
3. Configure the fields on the Event Management tag based alert grouping definition form.
4. Select Save.

Résultats

The definition appears in the Tag Based Alert Clustering Definitions table and Service Operations Workspace (ITOM) > Grouping automation. Alert groups created by this definition are categorized as Tag Cluster groups.