evt_mgmt.alert_insight_alert_same_as_filter The evt_mgmt.alert_insight_alert_same_as_filter property defines which alert fields must match to consider alerts similar. Admins should review this setting to ensure accurate alert correlation based on the default fields: source, type, resource, and metric_name.
source,type,resource,metric_nameThe answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property specifies a comma-separated list of alert fields that must be equal for alerts to be deemed similar, impacting alert management processes. |
|---|---|
| What area does it affect? | Alert Management |
| What does the default mean? | The default value is "source,type,resource,metric_name", which is the baseline setting used unless it is changed. |
| When should you review it? | Review this property when configuring alert correlation settings or troubleshooting alert similarity issues. |
Raw metadata from the property record.
| Property name | evt_mgmt.alert_insight_alert_same_as_filter |
|---|---|
| Sys ID | 95455df09332030054fc31f6357ffb0d |
| Type | string |
| Application | Global |
| Default value | source,type,resource,metric_name |
| Description | A comma separated string that contains alert fields that should be equal to the insight alert fields. Default :"source,type,resource,metric_name" |
| Updated | 2017-12-26 01:12:39 |
Official references and nearby text excerpts where this property appears.
evt_mgmtOther properties in the same namespace.
evt_mgmt.alert_black_list_fields
This property defines a comma-separated list of fields that are excluded from being copied to alert fields dur
evt_mgmt.alert_closes_incident
This property configures the behavior of closing alerts in relation to associated incidents, allowing for auto
evt_mgmt.alert_groups_reasoning.enable_worknotes
This property determines if worknotes are generated to document the reasoning behind alert groupings, impactin
evt_mgmt.alert_insight_alert_history_min
This property configures the duration for which Alert Insight retrieves historical alert data, allowing for th
evt_mgmt.alert_insight_closed_alert_window
This property specifies the duration in minutes after an alert's last updated date during which related CI tas
evt_mgmt.alert_insight_group_mapping
It configures the scoring mechanism for relationships between alerts in the same group, impacting alert priori
evt_mgmt.alert_insight_level_1_mapping
This property defines the scoring mechanism for level 1 relationships in alert insights, impacting alert prior
evt_mgmt.alert_insight_level_2_mapping
This property sets the score for level 2 relationships in Alert Insight, influencing alert prioritization and