Tables installed with Event Management Event Management adds these tables. Table Description Alert [em_alert] Alerts that Event Management manage. Alert Correlation Rule [em_alert_correlation_rule] Rules specifying primary and secondary correlated alerts. Alert Aggregation Group Alerts[em_agg_group_alert] Relationships between secondary alerts and the correlation group they belong to. Alert Aggregation Group[em_agg_group] Relationships between correlation groups and primary alerts. Alerts History[em_alert_history] History of alerts. Used for impact calculation. Alert Rule [em_alert_rule] Mappings of alert fields to the Incident [incident] table. Alert Template [em_alert_template] Alert templates. This table extends the Template [sys_template] table. Event Management SLA [em_ci_severity_task] Event management SLA tasks for CIs and business services. Connector Definition [em_connector_definition] Settings for gathering events from external event sources. Connector Instance [em_connector_instance] Connection details for external event sources. MID Server to Connector Instance [em_connector_instance_to_mid] Mappings of MID Servers to connector instances. Event [em_event] Events received by Event Management. Event Filter [em_event_filter] Storage for defined event filters. Event Match Rule [em_match_rule] Updated events for alert processing. Used by event rules. Event Match Field [em_match_field] Mappings of event fields to alert fields. Simple mapping. Used by Event Rules. Event Compose Field[em_compose_field] Mappings of event fields to alert fields. Composite mapping. Used by Event Rules. Event Mapping Rule [em_mapping_rule] Updated event fields for alert processing. Event Processing Statistics [em_event_stats] Statistics on Event Management performance. Event Type [em_event_type] Event types. Task Template [em_incident_template] Templates that define how to populate new tasks. For example, how fields of an incident that is being created from an alert, must be populated. This table extends the Template [sys_template] table. Registered Nodes [em_registered_nodes] Registered nodes data. Threshold Rule [em_threshold_rule] Alert threshold rules. Binding Device Map [Em_binding_device_map] Event binding to network paths and storage paths. Process to CI Type Mappings [Em_binding_process_map] Event binding to specific processes. CI Remediation [em_ci_remediation] Remediation rule definitions. Impact Graph [em_impact_graph] Impact tree of CIs containing CI hierarchy and impact rules to be used for impact calculation. Impact Graph History [em_impact_graph_history] History of changes in impact tree. Impact Rule Definitions [em_impact_rule_definition] Definition of rules used for impact calculation. Impact Rule instance [em_impact_rule] Rules based on impact rule definitions. Infrastructure Relations [em_impact_infra_rel_def] Child-parent pairs or CI types. CIs matching these definitions are added to impact trees. Impact Maintenance CIs [em_impact_maint_ci] CIs that are in maintenance and therefore are excluded from impact calculation. Impact Status [em_impact_status] Calculated status of CIs and services to be displayed in the dashboard and business service maps for technical services. SLA Configuration [em_sla_configuration] SLA configuration records that identify the CIs that SLAs can run on. Manual Service [cmdb_ci_service_manual] Stores records that represent Business Services that were created manually using Event Management > Manual Services capabilities, or imported from the Business Service [cmdb_ci_service] table. The added functionality of the Business Service table [cmdb_ci_service_manual] is that it supports Business Service maps and impact calculations. Event Management adds the following tables that are shared with Service Analytics. Table Description Alert Aggregation Group [em_agg_group] Stores alert aggregation query groups formed using co-relation rules and the groups generated using analytics. Alert Aggregation Group Alerts [em_agg_group_alert] Stores alerts associated to alert aggregation group.