Alert Management Rule triggered on age
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-01-2025 02:30 PM
Its my undertanding that alert management rules only trigger on a update to the alert record.
Is there a way to leverage an alert management rule based on the age of the alert? example increase severity if open after 30 minutes.
My guess is no since they only seem to evaluate upon an update and thinking I will just need to create a flow to do this.
With the introduction of flow some time back now, I am not really sure the value of Alert Management Rules to kick off Remediation Subflows
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-06-2025 08:36 PM
Hello @StephenM
Please confirm if you checked my answer. Kindly mark my answer as helpful and accept solution if it helped you in anyway. This will help me be recognized for my efforts and also it can move from unsolved bucket to solved bucket.
Regards,
Shivalika
My LinkedIn - https://www.linkedin.com/in/shivalika-gupta-540346194
My youtube - https://youtube.com/playlist?list=PLsHuNzTdkE5Cn4PyS7HdV0Vg8JsfdgQlA&si=0WynLcOwNeE
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-15-2025 12:57 AM
Hello StephenM
Why AMRs (Alert Management Rules) Won’t Work for This:
AMRs do not poll for conditions like "age > 30 minutes."
They won’t fire unless something explicitly updates the alert
- AMRs are not time-aware — they only trigger on alert creation/update
Best Solution: Scheduled Flow or Scheduled Script
AMRs are still fine for simple, real-time updates, but Flows offer better long-term flexibility and power.
Example Flow Designer Logic:
Trigger: Scheduled every 5 minutes
Action: “Get Records” from Alert [em_alert] where:
state != "closed"
severity != 4 (or whatever threshold)
sys_created_on < Now() - 30 minutes
Then: “Update Record” (set severity to 4, mark escalated, etc.)
Optionally: Launch a Subflow for remediation
Please mark my response if it was helpful!
Thank you!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-06-2025 09:01 AM
Thanks for the input, since these alerts don't fire often I decided to create a Alert Management Rule with a subflow that has a wait time in it. After the time passes, evaluate the condition and either exit out or continue.