Map the fields of an alert
Choose which parts of an alert become the title, the status and the address.
Each source has a built-in mapping that decides how its alerts are read: which field is the status, the title, how serious it is, and the source address. You can edit the mapping, or write your own for a tool we do not know.
- Status decides whether an alert opens or resolves an incident.
- Title and message are what people read in alerts.
- Key tells separate problems apart on one monitor. The monitor is down while any key is open.
- Source address is needed for blocking responses.
Use Preview with a real sample alert to see what the mapping produces before you save it. Every alert we receive is kept in the monitor's event log, including ones that were ignored, so you can see why.