Overriding default binding

Overriding default binding allows flexibility in linking alerts to CIs beyond the default Node-based matching. This helps customize alert binding based on business needs, ensuring accurate associations and preventing mislinked alerts, improving incident management and root cause analysis.

By default, alerts are bound to CIs by matching the node value in the alert with attributes like Name, FQDN, IP, or MAC Address in the CI. However, if you want to change this behavior—either by using additional criteria or ignoring the node altogether—you can use the Override Default Binding check box.

This allows for two scenarios:

1. When Binding Type = CI Field Matching
   • If the CI is a host, the Node is required for binding. For more information, see Bind host CIs using CI field matching.
   • If the CI is not a host, the Node must be empty. For more information, see Bind non-host CIs using CI field matching.
2. When Binding Type = CI Identification. For more information, see Bind alerts to CIs using CI identification.

This flexibility ensures alerts are linked correctly based on specific business needs.

Note:

You can also use Service Operations Workspace to override binding rules. For more information, see Enrich automation.