Update Severity value using event rule

#1

I have an integration where some events sent from DataDog to PagerDuty are being sent as severity “error” when in reality they are just “warning”. (This is due to not being able to set a warning threshold only on the DataDog side.) Within PagerDuty I would like to reset the severity to warning using event rules. Looking at the docs, I should be able to update any CEF field, but severity isn’t in the drop down. https://support.pagerduty.com/docs/rulesets#dynamic-field-enrichment--extraction

12
Screenshot 2023-02-24 at 16.34.12.png370Ă—802 27.1 KB

Can this be accomplished?

#2

Hi Kieran. You should be able to do this in Event Orchestration, which will replace the event rules this year. The current EOL for event rules is April 30, 2023.

More on event orchestration: https://support.pagerduty.com/docs/migrate-to-event-orchestration

You’ll have the ability to create rules to change the alert behavior and the alert data, and the toolset is more robust than the tools for event rules.

51%20PM
Screenshot 2023-02-24 at 12.02.51 PM.png1378Ă—794 52.3 KB

You can choose to ignore/auto resolve the warning message, change their data, or take other actions.

EO is quite a bit different from Event Rules, so there’s also a free, self-paced module on PDU for it. https://university.pagerduty.com/event-orchestration

1 Like