Bind alerts to CIs using event field mapping

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • Instead of creating separate event rules for each CI you want to bind to an alert, you can use event field mapping to bind an alert to multiple event CIs.

    Before you begin

    Role required: admin

    Procedure

    1. Navigate to All > Event Management > Rules > Event Field Mapping.
    2. On the Event Field Mapping page, fill in the fields as follows:
      Table 1. Event Field Mapping form
      Field Description
      Name Event field mapping name.
      Source Event monitoring software that generated the event, such as SolarWinds or SCOM. Maximum length: 100 characters.
      Order Number to define the order in which this action should be processed. Actions with lower numbers are processed first.
      Mapping type Select Single field.
      From field The field name of the value to replace, taken either from the event's Event field or Additional info field.
      To field Enter ci_type.
      Active Select to activate the event field mapping.
    3. In the Transform Value Pairs section, insert the following:
      Table 2. Transform Value Pairs section
      Field Description
      Key The values of the field specified in the From field field. Enter a separate entry for each value.
      Value The ci type to which you want to bind the alert.

    Example

    Following is an example of event field mapping which binds the value of the Ethernet field in an alert to the CI dscy_switchport:

    Bind alert to CI