Symptoms
Issue: Alerts not being created even when there is a valid event rule. It fails with following error in the Node logs.
Java.lang.IllegalArgumentException: No value for:
at com.snc.sw.kb.ClassificationEnum.getValueFromNumericValue(ClassificationEnum.java:31)
at com.glideapp.itom.snac.processor.EventTransformationHandler.process(EventTransformationHandler.java:56)
at com.glideapp.itom.snac.processor.EvtMgmtEventProcessor.applyEventHandlers(EvtMgmtEventProcessor.java:589)
at com.glideapp.itom.snac.processor.EvtMgmtEventProcessor.processEvent(EvtMgmtEventProcessor.java:564)
at com.glideapp.itom.snac.processor.EvtMgmtEventProcessor.processEventsForShard(EvtMgmtEventProcessor.java:423)
at com.glideapp.itom.snac.processor.EvtMgmtEventProcessor.processEvents(EvtMgmtEventProcessor.java:390)
at com.glideapp.itom.snac.processor.EvtMgmtEventProcessor.processHelper(EvtMgmtEventProcessor.java:301)
at com.glideapp.itom.snac.processor.EvtMgmtEventProcessor.processHandling(EvtMgmtEventProcessor.java:263)
at com.glideapp.itom.snac.processor.EvtMgmtEventProcessor.process(EvtMgmtEventProcessor.java:218)
at com.glideapp.itom.snac.processor.EvtMgmtEventProcessor.jsFunction_process(EvtMgmtEventProcessor.java:203)
at sun.reflect.GeneratedMethodAccessor389.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
Release
All Releases
Cause
When events are processed, it also looks to map the classification of the event when creating an alert. It looks to classify an alert based on the value from the event. Example: IT, Security.
Classification value is a mandatory field for the alert to be created. If you are mapping the Classification to a null value in the event transform rule, Alert creation will fail with the mentioned exception.
Resolution
Do not map classification to null in your event transform rule.