SN System Properties Reference
Property reference

evt_mgmt.update_agg_group_record_with_main_alert

Uses main alerts to find matching alert groups during automatic grouping. Enabled by default, it compares main-alert tags instead of using a representative child alert to find groups.

Default
true
Type
boolean
Application
Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? During automatic grouping, this setting determines whether matching alert groups are found by comparing their main alerts' tags rather than a representative child alert.
What area does it affect? Event management automatic grouping
What does the default mean? The default value is "true", which means this behavior is enabled by default.
When should you review it? Review when changing how tag-based automatic grouping matches alert groups.

Property record

No out of the box record exists. ServiceNow scripts read this property and use the default value shown until you create it.

Property name evt_mgmt.update_agg_group_record_with_main_alert
Type boolean
Application Not stated
Default value true
Description Not stated

Sources

Official references and nearby text excerpts where this property appears.

Used in

Out of the box artefacts that read this property. Append the path to your instance URL to open the record and see how the value is used.

Script include: EvtMgmtTagBasedDefinitionToACR The system reads this setting to decide whether to find matching alert groups through their main alerts, which can be compared directly by tags, rather than through a representative child alert. When enabled, this changes how groups are found for automatic grouping; the default is enabled (true). /sys_script_include.do?sys_id=21c4a01db76830107c038229ce11a910
Alert Correlation Rule: [Tag Based] Group alerts from the same namespace When enabled, the rule fetches group representative (main) alerts and compares their tags to find groups; otherwise, it uses a secondary alert in each group for that comparison. The default is true. /em_alert_correlation_rule.do?sys_id=e9fa38ac6761c210a26cf94ad8f922c3
Alert Correlation Rule: [Tag Based] Group alerts from the same subnet The correlation rule reads this setting to choose how it finds existing alert groups for tag comparison: true lets it use the group’s main alert, while false uses a secondary alert in the group. This changes which alert is used to match groups, and the default is true. /em_alert_correlation_rule.do?sys_id=ac09fd7867e9c210a26cf94ad8f92244
Alert Correlation Rule: [Tag Based] Group alerts with the same Application This setting controls whether alert grouping compares tags directly with a group’s main alert or uses a secondary alert in the group as the representative. It defaults to true, so the main alert is used unless an administrator changes the setting. /em_alert_correlation_rule.do?sys_id=c1e73d16074b7510d4728c14dfd3000c
Alert Correlation Rule: [Tag Based] Group alerts with the same Application and Environment /em_alert_correlation_rule.do?sys_id=0a48fd56074b7510d4728c14dfd30021
Alert Correlation Rule: [Tag Based] Group alerts with the same Assignment group and Class /em_alert_correlation_rule.do?sys_id=9367e625078f3110d4728c14dfd300b5

More in evt_mgmt

Other properties in the same namespace.

evt_mgmt.support_alerts_impact_directly_on_service_groups Enables support alerts to directly impact service groups when set to true. evt_mgmt.tigger_cmp_policy When enabled, alert policy handling applies policies to alerts; if processing exceeds three seconds, the… evt_mgmt.top_priority_group_threshold This property determines the threshold value above which alerts are classified as Urgent, ensuring that the… evt_mgmt.unknown_nodes_removed This property enables or disables the automatic removal of unknown nodes in the event management system… evt_mgmt.update_alert_restricted_fields_elapsed_time This property defines a 24-hour minimum interval for updating alerts related to identical events, helping to… evt_mgmt.use_alerts_cis_in_license This property enables or disables the inclusion of CIs from alerts in the license calculation process… evt_mgmt.valid_processing_duration_of_event_rule This property defines the valid processing duration for events in event rules, influencing how quickly… evt_mgmt.write_remediations_to_alert_work_notes This property enables or disables the logging of remediation execution details in alert work notes…

All 217 properties in evt_mgmt →