Secondary_property*

The secondary property is one of the key fields for incoming alerts and is used for correlation and deduplication within BigPanda. This field is displayed as the secondary title of alerts and incidents in the UI until a correlation pattern has been matched. The secondary property is optional, but often necessary to ensure alerts are being deduplicated appropriately.

If a "secondary_property"="tag_name" is not specified, the secondary property is defined as one of the following: check or sensor. Some integrations may allow you to customize which field a tool uses as the secondary property. See the integration-specific instructions for details on secondary property field defaults and customization.

🚧

Reserved Word

secondary_property is a reserved system word within BigPanda and cannot be changed or redefined for use in custom enrichment. When sending secondary_property fields to BigPanda ensure that secondary_property is lowercase only.


Recommended Reading