[generic]
title = Generic Default Template
_key = generic
data_source = generic
mapping_fields = [ \
    { \
        "name": "src", \
        "display_name": "Source", \
        "type": "source_field", \
        "required": true, \
        "default_value": "generic" \
    }, \
    { \
        "name": "signature", \
        "display_name": "Signature", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_generic_signature" \
    }, \
    { \
        "name": "vendor_severity", \
        "display_name": "Vendor Severity", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "OK" \
    }, \
    { \
        "name": "title", \
        "display_name": "Title", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_title" \
    }, \
    { \
        "name": "owner", \
        "display_name": "Owner", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "unassigned", \
        "default_value": "unassigned" \
    }, \
    { \
        "name": "status", \
        "display_name": "Status", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "1", \
        "default_value": "1" \
    }, \
    { \
        "name": "subcomponent", \
        "display_name": "Subcomponent", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "description", \
        "display_name": "Description", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "app", \
        "display_name": "App", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownSearchName", \
        "display_name": "ITSI Drilldown Search Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownSearch", \
        "display_name": "ITSI Drilldown Search", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownEarliestOffset", \
        "display_name": "ITSI Drilldown earliest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "-900" \
    }, \
    { \
        "name": "itsiDrilldownLatestOffset", \
        "display_name": "ITSI Drilldown latest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "900" \
    }, \
    { \
        "name": "itsiDrilldownWebName", \
        "display_name": "ITSI Drilldown Website Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownWebURL", \
        "display_name": "ITSI Drilldown Website URL", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsi_instruction", \
        "display_name": "ITSI Instruction", \
        "type": "notable_event_field", \
        "required": false \
    } \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="high", 5, lower(vendor_severity)="medium", 4, lower(vendor_severity)="low", 3, lower(vendor_severity)="normal", 2, lower(vendor_severity)="info", 1, lower(vendor_severity)="warning", 3, lower(vendor_severity)="ok", 2, lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, 1=1, 1)
status_id_mapping =

[nagios]
title = Nagios Default Template
_key = nagios
data_source = nagios
mapping_fields = [ \
    { \
        "name": "src", \
        "display_name": "Source", \
        "type": "source_field", \
        "required": true, \
        "default_value": "nagios", \
        "input_type": "composition", \
        "default_selected_field": "src" \
    }, \
    { \
        "name": "signature", \
        "display_name": "Signature", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_nagios_signature", \
        "input_type": "composition", \
        "default_selected_field": "eventname" \
    }, \
    { \
        "name": "vendor_severity", \
        "display_name": "Vendor Severity", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "OK", \
        "input_type": "composition", \
        "default_selected_field": "status_code" \
    }, \
    { \
        "name": "title", \
        "display_name": "Title", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_title" \
    }, \
    { \
        "name": "owner", \
        "display_name": "Owner", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "unassigned", \
        "default_value": "unassigned" \
    }, \
    { \
        "name": "status", \
        "display_name": "Status", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "1", \
        "default_value": "1" \
    }, \
    { \
        "name": "subcomponent", \
        "display_name": "Subcomponent", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "description", \
        "display_name": "Description", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_field": "body" \
    }, \
    { \
        "name": "app", \
        "display_name": "App", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_field": "app" \
    }, \
    { \
        "name": "itsiDrilldownSearchName", \
        "display_name": "ITSI Drilldown Search Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownSearch", \
        "display_name": "ITSI Drilldown Search", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownEarliestOffset", \
        "display_name": "ITSI Drilldown earliest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "-900" \
    }, \
    { \
        "name": "itsiDrilldownLatestOffset", \
        "display_name": "ITSI Drilldown latest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "900" \
    }, \
    { \
        "name": "itsiDrilldownWebName", \
        "display_name": "ITSI Drilldown Website Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownWebURL", \
        "display_name": "ITSI Drilldown Website URL", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsi_instruction", \
        "display_name": "ITSI Instruction", \
        "type": "notable_event_field", \
        "required": false \
    } \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="warning", 3, lower(vendor_severity)="ok", 2, lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, 1=1, 1)
status_id_mapping =

[scom]
title = Microsoft SCOM Default Template
_key = scom
data_source = scom
mapping_fields = [ \
    { \
        "name": "src", \
        "display_name": "Source", \
        "type": "source_field", \
        "required": true, \
        "default_value": "scom", \
        "input_type": "composition", \
        "default_selected_field": "host" \
    }, \
    { \
        "name": "signature", \
        "display_name": "Signature", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_scom_signature", \
        "input_type": "composition", \
        "default_selected_field": "name" \
    }, \
    { \
        "name": "vendor_severity", \
        "display_name": "Vendor Severity", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "informational", \
        "input_type": "composition", \
        "default_selected_field": "vendor_severity" \
    }, \
    { \
        "name": "title", \
        "display_name": "Title", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_title" \
    }, \
    { \
        "name": "owner", \
        "display_name": "Owner", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "unassigned", \
        "default_value": "unassigned" \
    }, \
    { \
        "name": "status", \
        "display_name": "Status", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "1", \
        "default_value": "1" \
    }, \
    { \
        "name": "subcomponent", \
        "display_name": "Subcomponent", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "description", \
        "display_name": "Description", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_field": "description" \
    }, \
    { \
        "name": "app", \
        "display_name": "App", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownSearchName", \
        "display_name": "ITSI Drilldown Search Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownSearch", \
        "display_name": "ITSI Drilldown Search", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownEarliestOffset", \
        "display_name": "ITSI Drilldown earliest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "-900" \
    }, \
    { \
        "name": "itsiDrilldownLatestOffset", \
        "display_name": "ITSI Drilldown latest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "900" \
    }, \
    { \
        "name": "itsiDrilldownWebName", \
        "display_name": "ITSI Drilldown Website Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownWebURL", \
        "display_name": "ITSI Drilldown Website URL", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsi_instruction", \
        "display_name": "ITSI Instruction", \
        "type": "notable_event_field", \
        "required": false \
    } \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="error", 5, lower(vendor_severity)="warning", 4, lower(vendor_severity)="informational", 1, 1=1, 1)
status_id_mapping =

[o11y]
title = O11y Default Template
_key = o11y
data_source = o11y
mapping_fields = [ \
    { \
        "name": "src", \
        "display_name": "Source", \
        "type": "source_field", \
        "required": true, \
        "default_value": "o11y", \
        "input_type": "composition", \
        "default_selected_field": "src" \
    }, \
    { \
        "name": "signature", \
        "display_name": "Signature", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_o11y_signature", \
        "input_type": "composition", \
        "default_selected_field": "signature" \
    }, \
    { \
        "name": "vendor_severity", \
        "display_name": "Vendor Severity", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "OK", \
        "input_type": "composition", \
        "default_selected_field": "vendor_severity" \
    }, \
    { \
        "name": "title", \
        "display_name": "Title", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_title", \
        "input_type": "composition", \
        "default_selected_field": "signature" \
    }, \
    { \
        "name": "owner", \
        "display_name": "Owner", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "unassigned", \
        "default_value": "unassigned" \
    }, \
    { \
        "name": "status", \
        "display_name": "Status", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "1", \
        "default_value": "1" \
    }, \
    { \
        "name": "subcomponent", \
        "display_name": "Subcomponent", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "description", \
        "display_name": "Description", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_field": "description" \
    }, \
    { \
        "name": "app", \
        "display_name": "App", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_field": "app" \
    }, \
    { \
        "name": "itsiDrilldownSearchName", \
        "display_name": "ITSI Drilldown Search Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownSearch", \
        "display_name": "ITSI Drilldown Search", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownEarliestOffset", \
        "display_name": "ITSI Drilldown earliest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "-900" \
    }, \
    { \
        "name": "itsiDrilldownLatestOffset", \
        "display_name": "ITSI Drilldown latest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "900" \
    }, \
    { \
        "name": "itsiDrilldownWebName", \
        "display_name": "ITSI Drilldown Website Name", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_field": "itsiDrilldownWeb" \
    }, \
    { \
        "name": "itsiDrilldownWebURL", \
        "display_name": "ITSI Drilldown Website URL", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_field": "itsiDrilldownURI" \
    }, \
    { \
        "name": "itsi_instruction", \
        "display_name": "ITSI Instruction", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_field": "itsi_instruction" \
    } \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = severity_id
status_id_mapping =

[solarwinds]
title = Solarwinds Default Template
_key = solarwinds
data_source = solarwinds
mapping_fields = [ \
    { \
        "name": "src", \
        "display_name": "Source", \
        "type": "source_field", \
        "required": true, \
        "default_value": "solarwinds", \
        "input_type": "regex", \
        "regex": ".*\\\/\\\/(?<itsi_field_name>[^\\\/]*)", \
        "regex_source": "Uri" \
    }, \
    { \
        "name": "signature", \
        "display_name": "Signature", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_solarwinds_signature", \
        "input_type": "regex", \
        "regex": "Component\\s+(?<itsi_field_name>\"[^\"]+\"|[\\w]+)", \
        "regex_source": "Message" \
    }, \
    { \
        "name": "vendor_severity", \
        "display_name": "Vendor Severity", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "OK", \
        "input_type": "regex", \
        "regex": ".* is (?<itsi_field_name>\\w+)", \
        "regex_source": "Message" \
    }, \
    { \
        "name": "title", \
        "display_name": "Title", \
        "type": "notable_event_field", \
        "required": true, \
        "default_value": "default_title" \
    }, \
    { \
        "name": "owner", \
        "display_name": "Owner", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "unassigned", \
        "default_value": "unassigned" \
    }, \
    { \
        "name": "status", \
        "display_name": "Status", \
        "type": "notable_event_field", \
        "required": true, \
        "input_type": "conf", \
        "default_selected_key": "1", \
        "default_value": "1" \
    }, \
    { \
        "name": "subcomponent", \
        "display_name": "Subcomponent", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "description", \
        "display_name": "Description", \
        "type": "notable_event_field", \
        "required": false, \
        "input_type": "composition", \
        "default_selected_key": "description" \
    }, \
    { \
        "name": "app", \
        "display_name": "App", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownSearchName", \
        "display_name": "ITSI Drilldown Search Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownSearch", \
        "display_name": "ITSI Drilldown Search", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownEarliestOffset", \
        "display_name": "ITSI Drilldown earliest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "-900" \
    }, \
    { \
        "name": "itsiDrilldownLatestOffset", \
        "display_name": "ITSI Drilldown latest offset", \
        "type": "notable_event_field", \
        "required": false, \
        "default_value": "900" \
    }, \
    { \
        "name": "itsiDrilldownWebName", \
        "display_name": "ITSI Drilldown Website Name", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsiDrilldownWebURL", \
        "display_name": "ITSI Drilldown Website URL", \
        "type": "notable_event_field", \
        "required": false \
    }, \
    { \
        "name": "itsi_instruction", \
        "display_name": "ITSI Instruction", \
        "type": "notable_event_field", \
        "required": false \
    } \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = case(lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, lower(vendor_severity)="critical", 6, lower(vendor_severity)="warning", 3, 1=1, 1)
status_id_mapping =