When CI Field Matching is used and the CI is a host, the Node value from the alert is used for binding. The system compares the Node with attributes like Name, FQDN, IP, or MAC Address in the CMDB to find a match. This
ensures that alerts are correctly linked to the corresponding host CI.
始める前に
Role required: evt_mgmt_admin
このタスクについて
When an event enters the system, key field like Node is available on the event record. The Node field generally
represents the name of the server. In CI there is no field like Node. However, the value of Node from the event is compared with different values in the host CI
such as Name, Fully qualified domain name (FQDN), IP, or MAC Address. If a match is found, the alert is linked to the corresponding CI. This is the default binding of alerts to CIs. In this binding, the CI must be a host.
Host CIs include Computers, OS, Switches, Routers—essentially any CI type or class that extends the [cmdb_ci_hardware] table.
There may be cases where no match is found because the column names in the event record and the table differ for the same item. In such cases, you can manually create an additional key-value pair with a name matching the
table column, ensuring the matching process continues successfully. For information on how to create a manual field, see
Bind CIs using CI field matching and handling column name differences.
注: Even if the node successfully binds the alert with the CI, event rules further determine how the binding occurs.
手順
-
Navigate to .
-
Select New and complete the required fields of the event rule.
-
Select the Binding tab.
-
Select the Override default binding check box.
-
In the Binding type field, select CI field matching.
-
In the CI type field, select the appropriate type of hardware component (such as a server, router, or storage device) that the CI type represents.
The CI type determines the specific CMDB table where the system searches for the matching CI. For example, if the CI type is Network Adapter, the
system searches in the [cmdb_ci_network_adapter] table.
-
Select Submit.
注: You can also use the
Service Operations Workspace to define binding rules. For more information, see
Create Enrich automation.