Bluk incident creation blocking - Event mnagment

[shital6]

Hello Everyone.

I have use case as below

We have integrated the PRTG monitoring tool with event management and the flow is going as events----> alerts----> and incident creation.

Now we want to disable the incident creation i.e. alert management rule so that there will not be more incident creation happen  if there are more than 10 incident created in last two minutes.

Also need to cancel the all alert's flow execution which has trigged if the above criteria meets.

Any suggestions/guidance here will be helpful

[Pratiksha]

You can do that in flow trigger condition by checking the count of total number of incident created today. You can reduce noise by adding condition saying that if any open incident on the same ci then update open incident. 

[Sandeep _]

I hope this article helps: https://www.servicenow.com/community/developer-forum/bulk-incident-creation-advice/m-p/1703332

If I could help you with your Query then, please hit the Thumb Icon and mark as Correct !!
Sandeep