Duplicate incidents are created in automated alert correlation

[Powshika B]

Hi @Ankur Bawiskar 

In Event Management,

Event E1 - 7.00(Time of event)---> Alert A1 is generated---> Incident INC1 is created
Event E2(same event with different message key) - 7.02-----> Alert A2 is generated(secondary alert, since pattern matches which is defined in automated alert correlation) ------> No incident created

Since A1 and A2 are grouped based on automated alert correlation, Virtual alert is generated as primary alert and incident INC2 is created

Now INC2 will become duplicate incident of INC1, Then what is the purpose of grouping? Is this how it actually works?

[Namrata8]

Hi Rahul,

Is this solution or behavior is mentioned in anywhere in ServiceNow docs?

Thanks in advance.