Log ingestion - how to map to DXC SNOW group

[sundarv1]

we are using Log ingestion and Event extract to catch the log and throw alert.

Is there is a way we can define a DXC SNOW group in the event extraction properties.

[ChadTurner]

If the data exists in the log, then yes you could dynamically pull that DXC group and list it in the payload. If the data isn't in the log, you can always set the DXC group but that will be don't statically in the description of the event template. 

[p_devulapalli]

@sundarv1 If your purpose is to add in some metadata like the snow group name in problem details to pass it on to servicenow when a incident is created you can use the Properties that are available in the event extraction rules to define additional metadata

Hope this helps