Bind alerts to a host CI

You can create an event rule to bind alerts to host CIs. An incoming event from a host CI can bind to an alert based on the event Node field value. If the value resides in a different event field, you can use an event rule transform to copy the data to the Node field on the alert.

Before you begin

Role required: evt_mgmt_admin or evt_mgmt_operator

About this task

Use the following steps to bind alerts to a host, such as a computer, switch, or router CI:
  • Populate the Node field in the event with the CI name, FQDN, IP or MAC value. The bind is successful even if host has more than one IP address or MAC.
  • If you want to use a unique identifier which is not one of the four mentioned above, populate the event rule CI Identifier field with one or more unique identifiers of the CI. This field should be in JSON format. For example, if you want to use a unique identifier which is not one of the four mentioned above, add a CI Identifier filter field with one or more unique identifiers of the CI. If the host CI is VMWare VM, and it has a field called MOID, use the JSON format and specify: {"moid":"<CI moid>"}

Procedure

  1. Navigate to Event Management > Rules > Event Rules.
  2. Click New, and fill in the appropriate fields of the event rule.
  3. Click Go to advanced mode.
  4. In the Filter condition builder, select Node, select an operator, and then enter the CI name, FQDN, IP, or MAC address value.
  5. Select the Transform check box.
  6. In the Event Match Fields section, specify any Additional information mappings.
  7. Click Submit.