We have Nimsoft integrated with SOI. Facing some issue with few alerts with very long summary, and unable to capture them completely in SOI.
Are there any custom XML files where message/summary field can be customized to accommodate more number of characters?
deepikasingh not certain if your problem was ever solved here. If it was, please mark answer as correct or let us know if more assistance is needed
Looks like there is some out of the box configuration needed, which we will have to figure out. As of now the scenario remains intact but we'll later look into it.
the fields are limited by the Database definitions:
Summary (DB field SituationMessage) has length 256
Message (DB field AlertDetail) has length 2048
Unless the DB Schema is changed (which will have unpredictable impacts), there is no way to update the length of these fields.
We have an Event policy which feeds the summary value of the alert into the Message field but there again the limit is 256.
Not able to find any event property of the name - AlertDetail.
I was referencing the names of the attributes in the database, not the names of the attributes in the Event policies (which can differ).
The Summary of an Alert is limited to 256 (and thus may be truncated already).
If you just re-map that to value to the Message attribute, it does not become longer again.
You would have to go to the RAW information in the Connector Policy to map the original long string to the Message attribute.
What I saw though in the USM model is that the length of Message seems to be limited to 1024 (the DB says 2048).
I will try to clarify this difference.