The primary property is one of the key data fields for incoming alerts. Primary property is used extensively for correlation within BigPanda and is the field which will be displayed as the main title of alerts and incidents in the UI. Alerts must include a primary property when sent to BigPanda in order to be received.

By default, the primary property is defined as one of the following: host, service, application, or device. Some integrations may allow you to customize which field a tool uses as the primary property. See the integration-specific instructions for details on primary property field defaults and customization.


Reserved Word

primary_property is a reserved system word within BigPanda and cannot be changed or redefined for use in custom enrichment. When sending primary_property fields to BigPanda ensure that primary_property is lowercase only.

Recommended Reading