{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":30524,"path":"it-operations-management/event-management/overriding-default-binding.md","title":"Overriding default binding","bundle":null,"doc_type":null,"release":"australia","body":"\n# Overriding default binding\n\nOverriding default binding allows flexibility in linking alerts to CIs beyond the default Node-based matching. This helps customize alert binding based on business needs, ensuring accurate associations and preventing mislinked alerts, improving incident management and root cause analysis.\n\nBy default, alerts are bound to CIs by matching the node value in the alert with attributes like Name, FQDN, IP, or MAC Address in the CI. However, if you want to change this behavior—either by using additional criteria or ignoring the node altogether—you can use the **Override Default Binding** check box.\n\nThis allows for two scenarios:\n\n1.  When Binding Type = CI Field Matching\n    -   If the CI is a host, the Node is required for binding. For more information, see [Bind host CIs using CI field matching](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/ci-matching-ci-is-host.md).\n    -   If the CI is not a host, the Node must be empty. For more information, see [Bind non-host CIs using CI field matching](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/ci-matching-ci-non-host.md).\n2.  When Binding Type = CI Identification. For more information, see [Bind alerts to CIs using CI identification](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/bind-alerts-CI-app-host-monitoring.md).\n\nThis flexibility ensures alerts are linked correctly based on specific business needs.\n\n**Note:** You can also use Service Operations Workspace to override binding rules. For more information, see [Enrich automation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/event-management/enrich-alert-sow-itom.md).\n\n"}}