4 Replies Latest reply on May 30, 2019 7:17 AM by Paolo Campagno

    Retrieve incident ID from an event with Orchestrator

    Paolo Campagno
      Share This:

      Hi,

       

      I'm using TrueSight Orchestration v8.1.00.001 and I want to retrieve the incident ID (itsm_incident_id field) of an event in TrueSight Operation Manager (v10.7.00.003).

       

      Adapter bmc-adapter-truesight-operations-manager-actor 20.18.01.00

      Module AO-AD-BMC_ProactiveNet_Performance_Management 20.18.01.00

       

       

       

      My workflow is very simple: I know the evendID (mc_ueid) and i want to retrieve the from this event the inicident related to the event (itsm_incident_id).

       

      I'm using the the process ootb of the module AO-AD-BMC_ProactiveNet_Performance_Management RetrieveEventByID.

      When I check the adapter response i can't retrieve the field itsm_indcident_id.

       

      This is the adapter response:

       

      <bmc-proactivenet-performance-management-response>

        <response-metadata>

          <status>success</status>

          <count>1</count>

        </response-metadata>

        <proactivenet-performance-management-query-response>

          <query-executed>select [mc_tool_address, mc_account, mc_propagations, mc_owner, mc_event_category, mc_date_modification, msg, mc_action_count, mc_incident_time, mc_tool, mc_tool_class, mc_host_class, mc_relation_source, mc_smc_type, duration, mc_ueid, date_reception, mc_notes, mc_parameter_threshold, status, mc_tool_time, adapter_host, mc_priority, mc_local_reception_time, mc_host_address, mc_service, mc_host, severity, mc_smc_id, mc_smc_alias, mc_arrival_time, mc_parameter, CLASS, mc_object, mc_tool_rule, mc_object_class, mc_location] from CORE_EVENT where [$THIS.mc_ueid equals 'MYID'] END</query-executed>

          <query-responses>

            <query-response>

              <mc_tool_address>*****</mc_tool_address>

              <Account />

              <propagations>******</propagations>

              <Owner>*****</Owner>

              <Category>OPERATIONS_MANAGEMENT</Category>

              <Modified>1559141342</Modified>

              <Message>Test1</Message>

              <Occurences>24</Occurences>

              <Origin_Time>0</Origin_Time>

              <mc_tool>******</mc_tool>

              <mc_tool_class>Monitoring Tool</mc_tool_class>

              <Host_Class>****</Host_Class>

              <Relation />

              <Component_Type />

              <Time_to_Close>0</Time_to_Close>

              <ID>myID</ID>

              <Occurred>1559138485</Occurred>

              <Notes />

              <Parameter_Threshold />

              <Status>ASSIGNED</Status>

              <mc_tool_time>1559138485</mc_tool_time>

              <adapter_host />

              <Priority>PRIORITY_5</Priority>

              <Received>1559138485</Received>

              <Host_Address>******</Host_Address>

              <Service>Internal Service</Service>

              <Host>*******</Host>

              <Severity>CRITICAL</Severity>

              <Component_ID />

              <SMC_Alias />

              <Arrived>1559138485</Arrived>

              <Parameter>*****</Parameter>

              <Class>****</Class>

              <Object>******</Object>

              <Rule />

              <Object_Class />

              <Location>Unknown</Location>

            </query-response>

          </query-responses>

        </proactivenet-performance-management-query-response>

      </bmc-proactivenet-performance-management-response>

       

       

      Is there a way to change the <query-executed> to retrieve other field about the event in addition to the these fields in the adapter response?

       

      Someone has a different idea to retrieve the incidentID from the eventID?

       

      I would prefer not use a mquery on truesight server.

       

       

      Thanks in advance to anyone who can help me.