We have a Webhook Auto-Operator configured for the messagegtw probe that syncs all alarms to ServiceNow and would like to exclude specific alerts. In this scenario we sync all alerts from various probes, including the CDM but would like to exclude all BootAlarms generated by CDM.
Example of AO:
How can we exclude specific CDM alerts in Webhook AO?
Any UIM version
To exclude specific alerts the Message string can be configured with a matching criteria and the 'NOT Expression' option enabled.
The NOT Expression is enabled by clicking on the small button above the Message string field as shown below: