evt_mgmt.alert_groups_reasoning.enable_worknotes The evt_mgmt.alert_groups_reasoning.enable_worknotes property defines whether worknotes are created for alert group reasoning. Admins should review this setting to manage the visibility of grouping reasons during alert processing, especially during high-volume alert events.
allThe answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property determines if worknotes are generated to document the reasoning behind alert groupings, impacting how alert information is recorded and displayed. |
|---|---|
| What area does it affect? | Alert Management |
| What does the default mean? | The default value is "all", which is the baseline setting used unless it is changed. |
| When should you review it? | Review this property when configuring alert grouping behavior or during periods of high alert activity. |
Raw metadata from the property record.
| Property name | evt_mgmt.alert_groups_reasoning.enable_worknotes |
|---|---|
| Sys ID | fc004ca27320230007bf1e57faf6a726 |
| Type | choice list |
| Application | Global |
| Default value | all |
| Description | Define alert types for alert group reasoning worknotes creation |
| Updated | 2018-09-20 01:47:10 |
Official references and nearby text excerpts where this property appears.
evt_mgmtOther properties in the same namespace.
evt_mgmt.alert_auto_assignment_field
This property defines which fields are used to automatically assign alerts to appropriate teams, enhancing inc
evt_mgmt.alert_auto_close_interval
This property specifies the interval in hours after which open alerts are automatically closed, enhancing aler
evt_mgmt.alert_black_list_fields
This property defines a comma-separated list of fields that are excluded from being copied to alert fields dur
evt_mgmt.alert_closes_incident
This property configures the behavior of closing alerts in relation to associated incidents, allowing for auto
evt_mgmt.alert_insight_alert_history_min
This property configures the duration for which Alert Insight retrieves historical alert data, allowing for th
evt_mgmt.alert_insight_alert_same_as_filter
This property specifies a comma-separated list of alert fields that must be equal for alerts to be deemed simi
evt_mgmt.alert_insight_closed_alert_window
This property specifies the duration in minutes after an alert's last updated date during which related CI tas
evt_mgmt.alert_insight_group_mapping
It configures the scoring mechanism for relationships between alerts in the same group, impacting alert priori