Bind alerts for application CIs

An incoming event from an application CI can bind to an alert based on event rule transform information. Create an event rule to bind alerts to the host CI and also to the application CI.

Before you begin

Role required: evt_mgmt_admin or evt_mgmt_operator

About this task

For example, you can bind alerts to a SQL server application when the CPU on sqlServer.exe is over 90%:
  • Make sure that the event includes the host name.
  • Create an event rule with an Event Match Field entry that maps the process name to the sa_process_name mapping variable. In this case, do not use the CI type.
  • Use the Process to CI Type Mapping module to add custom patterns.
In the binding process, the following steps occur:
  • Identify the host.
  • If the host is found, find the application on the host. An application is considered to be running on the host if it has a "Runs on:Runs" relationship from the application to the host CI in the cmdb_rel_ci table.
  • If the event rule for the transform CI type is defined, find an application CI on that host in the CMDB.
  • If all the alert additional_info about the CI matches CMDB CI fields, bind the alert to the application CI.

Procedure

  1. Navigate to Event Management > Rules > Event Rules.
  2. Click New and fill in the appropriate fields of the event rule.
  3. Click Go to advanced mode.
  4. In the Filter condition, select Node, select an operator, and then enter the CI name, FQDN, IP, or MAC address values for the host binding.
  5. Select the Transform check box.
  6. Select the application CI type.
  7. In the Event Match Fields section, specify any Additional information mappings.
  8. Click Submit.