Configure work notes to capture alert grouping justifications

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • As alerts are added to a group, a message is recorded in the alert’s Work notes field to explain why the alert was included in the group. Define alert types for creating these worknotes related to alert group reasoning.

    Before you begin

    Role required: evt_mgmt_admin

    Procedure

    1. Navigate to All > System Properties > All Properties.
    2. Search for the property evt_mgmt.alert_groups_reasoning.enable_worknotes.
    3. Open the property.
      Property page where you can define alert types for creating worknotes related to alert group reasoning.
    4. In the Choices field, define alert types for creating worknotes related to alert group reasoning.
      Table 1. Property values
      Value Description
      All Alerts Work note information is generated for every alert.
      Primary Alerts Work note information is generated only for primary alerts.
      Secondary Alerts Work note information is generated only for secondary alerts.
      None No work note information is generated.
    5. Select Update.