Event Management Event Trigger Order/Suppression

RRolling
Tera Guru

Hello Community,

 

I need help determining how to handle three separate events that may be related to a single monitoring tool issue. Each event could be triggered by a different alert. If the top-level alert is triggered, the lower-level alerts should be suppressed. However, if the top-level alert is not triggered, each lower-level alert should be triggered independently.

RRolling_0-1724285117083.png

Any pointers?

  

1 REPLY 1

User342536
ServiceNow Employee
ServiceNow Employee

Hi @RRolling ,

What is closest to what you described, is rule-based alert group.

Please check link https://docs.servicenow.com/bundle/xanadu-it-operations-management/page/product/event-management/con....

Also, log into your PDI, and check Alert correlation rule ("Alert correlation rule SAMPLE"), to guide you on how to develop it.
Important to have in mind the following:

1- Primary and secondary alert.

2- Time window for scenario you described, to happen.

Kindest Regards,

Rodrigo Donnangelo