Previous Topic: Raw Event Properties in Normalization ActionsNext Topic: Map Raw Event Property Values to Enumerated USM Property Values


Assign Normalized Events to a Service

Events must be associated with a managed CI when they are normalized to appear as alerts on the Operations Console. Configure the associated CI for a normalized event using the AlertedMdrProduct, AlertedMdrProdInstance, and AlertedMdrElementID properties on the Normalize Event page. These properties must contain valid values to associate the normalized event with a CI.

To populate the necessary properties automatically and to associate the event with a service, use the right-click menu on the Normalize Event page. On the Operations Console, the normalized event appears as an alert generated directly on the defined service CI.

Follow these steps:

  1. Create an event policy with a normalization action, and proceed to the Normalize Event page.

    Note: You can also perform this assignment when creating an event policy with a create event action.

  2. Right-click the Assigned Value cell for one of the following properties and select Service:

    The Select Service dialog opens.

  3. Select the service that you want to associate with the normalized event, and click OK.

    The values for all three properties appear for the selected service on the Normalize Event page. When you deploy the policy, any events that the policy normalized appear as alerts directly on the defined service CI.

    Note: If you know the properties for the exact CI to assign to the alert, you can also manually populate the three values. However, the AlertedMdrElementID value must match a CI on the searched connector for the event to appear as an alert in the Operations Console.