evt_mgmt.alert_insight_alert_history_min The evt_mgmt.alert_insight_alert_history_min property sets the time frame in minutes for retrieving similar and repeated alert data in Alert Insight. With a default value of 43200 minutes, or 30 days, it helps administrators analyze alert trends over a significant period.
43200The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property configures the duration for which Alert Insight retrieves historical alert data, allowing for the identification of recurring alerts. |
|---|---|
| What area does it affect? | Alert Insight configuration |
| What does the default mean? | The default value is "43200", which is the baseline setting used unless it is changed. |
| When should you review it? | Review this property when adjusting alert analysis parameters or troubleshooting alert patterns. |
Raw metadata from the property record.
| Property name | evt_mgmt.alert_insight_alert_history_min |
|---|---|
| Sys ID | 308451f09332030054fc31f6357ffbb7 |
| Type | string |
| Application | Global |
| Default value | 43200 |
| Description | Time elapsed (in minutes) before alert creation to retrieve similar and repeated alert data for Alert Insight (default 43200 – 30 days) |
| Updated | 2018-03-05 03:41:18 |
Official references and nearby text excerpts where this property appears.
evt_mgmtOther properties in the same namespace.
evt_mgmt.alert_auto_close_interval
This property specifies the interval in hours after which open alerts are automatically closed, enhancing aler
evt_mgmt.alert_black_list_fields
This property defines a comma-separated list of fields that are excluded from being copied to alert fields dur
evt_mgmt.alert_closes_incident
This property configures the behavior of closing alerts in relation to associated incidents, allowing for auto
evt_mgmt.alert_groups_reasoning.enable_worknotes
This property determines if worknotes are generated to document the reasoning behind alert groupings, impactin
evt_mgmt.alert_insight_alert_same_as_filter
This property specifies a comma-separated list of alert fields that must be equal for alerts to be deemed simi
evt_mgmt.alert_insight_closed_alert_window
This property specifies the duration in minutes after an alert's last updated date during which related CI tas
evt_mgmt.alert_insight_group_mapping
It configures the scoring mechanism for relationships between alerts in the same group, impacting alert priori
evt_mgmt.alert_insight_level_1_mapping
This property defines the scoring mechanism for level 1 relationships in alert insights, impacting alert prior