Duplicate task creation with group alerts

[Jeffreys Quinti]

As you may know, the out of the box correlation(CMDB, Automated, text based, etc.) creates a new Group Alert as a parent record and keeps the real alerts as secondary child alerts.

When using an alert management rules to create Incidents automatically from alerts, if alerts are open more than 1 minute apart:

• The first alert will create a task.
• The second alert will trigger the creation of a group Alert
• The Group Alert will also create a second task.

This is a pain point as we must document and close 2 tasks instead of 1.

Our solution was to create a business rule that runs when the parent changes, parent is not empty, and task is not empty. The business rules is then a few lines of scripting to take the original created task in the alert that has now become secondary and transfer it to the group alert.

As a result, if you get a group alert with alerts that are spaced out time wise, we are not generating a second task, but rather reusing the first generated task.

Have you come accross this problem in your instance? if so what was your solution? 

[Vihitha]

@Jeffreys Quinti Were you able to find the solution for duplicate task creation on group alert?