Lesson 3 of 5
Alerting, event routing and ownership
10 min
Listen to this lesson
An alert without an owner is worse than no alert: it trains people to ignore the channel. In SAP Cloud ALM, alerts and notifications come from Intelligent Event Processing (IEP), the component that routes events between producers and consumers. The design work is deciding, for each event, who must act, how they are told, and what happens if they do not.
How events flow
- Event raisedA monitoring app detects a situation, for example an IDoc in error or a job running too long
- Rule appliedEvent processing rules, usually created by the monitoring app's event settings, decide the actions
- ActionsAlert in the app's inbox, email, ticket in the ITSM tool, chat message, or operation flow
- HandledOwner acknowledges, works the runbook, confirms the alert
- ClosedConfirming an alert implicitly closes the related event situation
Some details matter for design. SAP distinguishes event situations, which open, may update and later close, from stateless events, which open and close at once, such as a specific application log message; stateless events cannot be updated or auto-closed later. Event processing rules are normally created and managed in the source monitoring app and shown read-only in IEP; SAP describes manual rules in IEP as for exceptional cases. Not every action is available for every use case (Business Service Management, for example, does not create alerts), and IEP's overview shows triggered events and failed actions with error messages, which is where to look when an expected email never arrived.
Ownership by design
| Event type | Owner (acts) | Channel | Escalation |
|---|---|---|---|
| EDI order or invoice in error (1710 or 1910) | Integration specialist | Alert inbox and ticket in the ITSM tool | Maria after 2 hours in business hours |
| Nightly billing job failed or late | Operations analyst | Email and ticket | Sam if not resolved by 06:00 |
| Payment run failed | Operations analyst with Ana | Email and chat | Dan immediately |
| CMP technical health critical | SAP ECS (technical) and Sam (business impact) | SAP incident; Contoso alert for awareness | Per RISE incident priority |
| Bank statement flow in Integration Suite failed | Integration specialist | Alert inbox | Dan's treasury contact by 10:00 |
Extract of Contoso's alert ownership matrix (illustrative). Every row has one acting owner.
Under RISE, ownership also crosses company lines. When CMP's health turns critical, SAP ECS acts on the platform, but Contoso still decides what it means for the business, informs users and confirms the resolution, because the R&R makes sign-off of incident resolution a customer task. Route such events to Sam for awareness rather than duplicating SAP's technical response.
Severity and timing need the same care as ownership. A failed EDI invoice at 23:00 can wait for the integration specialist's morning if the customer collects invoices at 08:00; a failed payment run on the day suppliers must be paid cannot. Write the business deadline into each alert definition, so the escalation time follows the business, not a generic priority table. Wave 2 adds a twist: Monterrey works in a different time zone and its own month-end calendar, so alerts for company code 1910 need owners who are awake when they fire.
What would you do?
During hypercare, an alert for 'payment run failed' goes to a shared mailbox read by six people. One Friday, the payment run fails; everyone assumes someone else is handling it, and suppliers are paid three days late. What is the root fix?
- Intelligent Event Processing routes events to alerts, email, ITSM tickets, chat or operation flows.
- Rules are usually managed in the source monitoring app; IEP's overview shows failed actions.
- Every alert needs one acting owner, an escalation, informed parties and a runbook.
- Test alerts by triggering them on purpose before go-live; under RISE, route platform events for awareness.
Check your understanding · not graded
Lesson check
1. Which action is not something IEP can trigger, according to SAP's description?
2. What is a stateless event in SAP Cloud ALM?
3. Where are event processing rules normally created and changed?
4. What makes an alert ready for production?