Configure an overwrite alert template

An overwrite alert template modifies alert field values before inserting or updating the alert in the Alert [em_alert] table. For reference purposes, the original information is always available in the event.

Before you begin

Role required: evt_mgmt_admin

About this task

You can customize alert field values by adding an overwrite alert template to an alert rule. The template specifies the alert field values to modify before the alert is written to the Alert [em_alert] table. For example, you can use an overwrite alert template to reduce the severity of active alerts for test CIs or test sources.

Procedure

  1. Navigate to Event Management > Rules > Alert Rules.
  2. Click New or select an existing alert rule to edit.
  3. Select Alert filter criteria to match alerts with field values that you want to modify.
  4. Click the Action tab.
  5. Next to the Overwrite alert template field, click the lookup icon.
  6. Click New.
  7. Fill in the fields, as appropriate.
    Table 1. Alert Template form
    Field Description
    Name A name to identify the alert template.
    Table The table name for alerts. Read only.
    Active A check box to activate the alert template.
    User The user who is authorized to change this alert template.
    Group The group that is authorized to change this alert template.
    Global A check box to notify all members of your organization.
    Short Description The purpose of the alert template.
    Template The alert field name and new substitution value to use when alert rule conditions are met.
  8. To specify the time interval and conditions for automatically opening an alert:
    1. Click Schedule.
    2. Fill in the fields as appropriate, and then click Submit.
    Table 2. Scheduled Entity Generation form
    Field Description
    Name The schedule name.
    Active A check box to activate this schedule.
    Run The interval for generating a task until the alert or alert group is resolved.
    • Daily: Every day at the specified Hour, Minute, and Second until the alert or alert group is resolved.
    • Weekly: Every week on the specified Day, Hour, Minute,and Second until the alert or alert group is resolved.
    • Monthly: A day of each month on the specified Day, Hour, Minute, and Second until the alert or alert group is resolved.
    • Periodically: The Repeat Interval with Days, Hour, Minutes, and Seconds with a Starting date.
    • Once: Generate a single task on the specified Day, Hour, Minute, and Second.
    • On Demand: Generate a single task only when a user selects Create Incident.
    Conditional The set of conditions in which to apply this schedule.
    Generate This The name of the task template that can use this schedule for generating tasks.
    The new template is populated in the Overwrite alert template field on the Alert rule form.
  9. Click Submit or Update.