SN System Properties Reference
Property reference

evt_mgmt.alert_black_list_fields

The evt_mgmt.alert_black_list_fields property specifies fields that should not be copied from additional information to alert fields. Admins should review this property to customize alert content and prevent unnecessary data from being included in alerts.

Default
message_key,category,additional_info,sys_updated_on,sys_updated_by,sys_created_by,sys_created_on,sys_mod_count,sys_id,state,sn_priority,sn_services,number,description,work_notes,source,node,resource,event_class,cmdb_ci,initial_remote_time,last_remote_time,initial_event_time,last_event_time,task,remote_task_id,kb_knowledge,url,severity,state,acknowledged,maintenance,classification,metric_name,group,group_source,incident,event_count,sn_alert_tags
Type
string
Application
Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property defines a comma-separated list of fields that are excluded from being copied to alert fields during event processing.
What area does it affect? Event Management
What does the default mean? The default value is "message_key,category,additional_info,sys_updated_on,sys_updated_by,sys_created_by,sys_created_on,sys_mod_count,sys_id,state,sn_priority,sn_services,number,description,work_notes,source,node,resource,event_class,cmdb_ci,initial_remote_time,last_remote_time,initial_event_time,last_event_time,task,remote_task_id,kb_knowledge,url,severity,state,acknowledged,maintenance,classification,metric_name,group,group_source,incident,event_count,sn_alert_tags", which is the baseline setting used unless it is changed.
When should you review it? Review this property when configuring alert content or optimizing event processing.

Out of the box property record

Raw metadata from the property record.

Property name evt_mgmt.alert_black_list_fields
Sys ID f1a6d7a193d21200a45a76df067ffb2a
Type string
Application Global
Default value message_key,category,additional_info,sys_updated_on,sys_updated_by,sys_created_by,sys_created_on,sys_mod_count,sys_id,state,sn_priority,sn_services,number,description,work_notes,source,node,resource,event_class,cmdb_ci,initial_remote_time,last_remote_time,initial_event_time,last_event_time,task,remote_task_id,kb_knowledge,url,severity,state,acknowledged,maintenance,classification,metric_name,group,group_source,incident,event_count,sn_alert_tags
Description Black list of fields not to be copied from the additional-info to the alert's fields. Splitted by comma (,)
Updated 2022-08-18 06:19:45

Sources

Official references and nearby text excerpts where this property appears.

Documentation excerpt View supporting context
Context preview Snippet 1
... user_ prefix. If so, use Event Rules to create an Additional information field with the same name. To prevent some fields to be copied to the alert field, use the evt_mgmt.alert_black_list_fields property and add the field names that must be excluded. By default, the fields that are not copied are: • message_key • category • additional_info • sys_updated_on • sys_updated_by • ...

More in evt_mgmt

Other properties in the same namespace.

evt_mgmt.alert.management.enable_legacy_alert_action_rules This property determines whether legacy alert action rules are enabled, affecting how alerts are processed and evt_mgmt.alert_ack_on_close This property determines whether an alert is automatically acknowledged upon manual closure, enhancing alert m evt_mgmt.alert_auto_assignment_field This property defines which fields are used to automatically assign alerts to appropriate teams, enhancing inc evt_mgmt.alert_auto_close_interval This property specifies the interval in hours after which open alerts are automatically closed, enhancing aler evt_mgmt.alert_closes_incident This property configures the behavior of closing alerts in relation to associated incidents, allowing for auto evt_mgmt.alert_groups_reasoning.enable_worknotes This property determines if worknotes are generated to document the reasoning behind alert groupings, impactin evt_mgmt.alert_insight_alert_history_min This property configures the duration for which Alert Insight retrieves historical alert data, allowing for th evt_mgmt.alert_insight_alert_same_as_filter This property specifies a comma-separated list of alert fields that must be equal for alerts to be deemed simi

All 117 properties in evt_mgmt →