Tags in Custom Payload - What's the difference?

[sholmes]

Does anyone happen to know what the difference is between the two tag related fields that are sent through as part of the {tags} placeholder (presumably).

We have a payload of:

"ImpactedEntities": {ImpactedEntities},
"ImpactedEntity": "{ImpactedEntity}",
"PID": "{PID}",
"ProblemDetailsHTML": "{ProblemDetailsHTML}",
"ProblemDetailsJSON": {ProblemDetailsJSON},
"ProblemDetailsMarkdown": "{ProblemDetailsMarkdown}",
"ProblemDetailsText": "{ProblemDetailsText}",
"ProblemID": "{ProblemID}",
"ProblemImpact": "{ProblemImpact}",
"ProblemSeverity": "{ProblemSeverity}",
"ProblemTitle": "{ProblemTitle}",
"ProblemURL": "{ProblemURL}",
"State": "{State}",
"Tags": "{Tags}"

The important bits that we have are:

""tagsOfAffectedEntities" : [ {
      "context" : "CONTEXTLESS",
      "key" : "No Assignment Group - Remediation Required"
    },

  "tags" : "AssignmentGroup:TEAM, Product:xxx

One of them is showing that it has tags (correctly) and one of them says it has a different tag, it's a single entity that has reported this problem, and it's been sent through on the same payload. Where exactly does {tags} get populated from? Where does "tagsOfAffectedEntities" get populated from? Why are they different?

[ChadTurner · Accepted solution]

Tags and Tags of affected entities will include all the tags on the entity(ies) that are affected by within the problem card. For example if you have a Host with 2 tags and it has CPU issues, then you'll get the tags of that given host in your payload. If you have multiple entities that have issues, Hosts, Processes and Services, you'll get the associated tags for all 3 affected entities respectively. 

The core differences is {Tags} will be a collection of all the tags. Where {TagsOfAffectedEntities} will show the associated tags per affected entities and not just an overall SUM of all of them.