Alert management rules & subflows

Fares1
Kilo Expert

Hey!

I have an issue with my Alert Management Rule. 

The context is that a customer wants to generate alerts (and incidents) using keywords from the subject and body of the mail. The alert generation is handled by an Inbound Action that creates said alerts.

The tricky part is generating the incident. I decided to create an Alert Management Rule to handle that using a set of filters and my action being a remediation Subflow. The Subflow as it own works perfectly when I try to test it ==> generates incident. However when the rule is applied, no Incident is generated (cf alert.png)

The subflow is inspired from the original "Create Incident" subflow from ServiceNow, I just modified it to suit my customers preferences (cf flow.png)

Is there a certain subtility I'm missing?
Thanks in advance for your help.

1 ACCEPTED SOLUTION

Gianpaolo Pagan
ServiceNow Employee
ServiceNow Employee

It seems the subflow actually triggered, are you saying it actually triggers but you still don't see the incident created?

If so I would suggest you to open the flow execution in flow designer and look at each step to see where it's failing.

 

Gp

View solution in original post

12 REPLIES 12

Yes, you're right

I have done many incident integrations using this BR by adding conditions

 

Hello Steven,

 

 We recently Upgraded to London  and the EvtMgmtCustomIncidentPopulator" Script Include is not working in London  which used to work in Kingston Version.  Do you have any idea what could be reason for that ?

 

Thanks

Gautam

stevemacamway
Giga Expert

Gautam,

We migrated from Jakarta to London, and it is still working. As part of the upgrade did you make any changes to the script? One thing to check would be to see if there are any entries in the logs. To ensure that it is getting called, you may want to put a logging message at the beginning of the script. Once you've validated that, try interspersing logging throughout the script at key points to ensure it is making to that portion of the code. 

Steve