How to get WPM transaction alerts to show up in ServiceNow Event Management alerts

[schrumma]

We are implementing Service Now's Event Management and can get all SolarWinds alerts to come in to Event managements event page.  The thing we need to do now is bring in WPM transaction alerts in to Event management.  Below is the query used to bring in alerts from Solarwinds into Event Management.  Just need to add a piece for WPM alerts.  Any help would be appreciated.

we would need to find the correlating variables within the Orion.SEUM that fit the curent query,  var query = "SELECT TOP " + MAX_EVENTS_TO_FETCH +             " EventID, EventTime, NetworkNode, NetObjectID, EventType, Message, Acknowledged, " +             "NetObjectType, Timestamp FROM Orion.Events " +             "WHERE NetworkNode > 0 AND NetObjectID > 0 ";

[mcam]

the upgrade to 2020.2 is well worth it. Lots of really cool stuff in basic Orion that impacts every module.
You will love it 🙂

[pratikmehta003]

We have cone across similar issue for datastore alerts. Wheh reached out to ServiceNow support they mentioned this is the only script which is currently built in...if u need other type of events then u can modify the script and test..and they have registered it as a ticket to their product team but no timelines..

Workaround is in 2020 version of SolarWinds u have a POST alert action available which will work for all events but for that u would need to upgrade..OR u have to try using 'send as trap' option but not a very good way to go if it's huge alerting....

[mcam]

I can't help directly but can point you in a self-help direction 😎

There are several ways in Orion to build queries that will give you the basic syntax you can translate to external apps.

Assuming you have the 2020.2 release and the nice new dashboards, you could build a modern dashboard and use the table widget and its graphical query builder to get a table view. That will also give a you a list of the events that you would expect ServiceNow to see and also give you the SWQL to product the query.

 Just a thought.

[schrumma]

Thanks for the idea.  We are still on 2019.4.  Might give me an incentive to upgrade.