The CreatorCon Call for Content is officially open! Get started here.

Alert grouping creating a duplicate incidents

Arjun Arjun
Tera Contributor

We have custom alert correlation which will group alerts when alert has same node.

Here I have come up with one scenario, I have alert received from one of the node and for same alert it's created incident ,after 10 min again we have received another alert from same node since both are the same nodes  it created group alert and  incident ,while it creating group alert oldest alert as considered as a primary alert in a group because of its highest severity and oldest one.

 

 Can some one advices me is there a way to avoid creating incident in group alert when if secondary alert has already have  incident task since both are the same nodes.

 

 

Thanks in advance !

 

 

 

 

2 REPLIES 2

Abbas_5
Tera Sage
Tera Sage

Hello @Arjun Arjun ,
Please refer to the below link:
https://www.servicenow.com/community/itom-forum/duplicate-incidents-are-created-in-automated-alert-c...

 

If it is helpful, mark it as a thumps-up and accept the correct solution.

Thanks & Regards,
Abbas

Hi Abbas, thanks for your response.

 

It could be wonder if we have any solution like suppose secondary alert has incident then not create incident for group alert, or if alert has incident then it should not  consider in a group.

 

Thanks