Event Management Event Trigger Order/Suppression
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-21-2024 05:06 PM
Hello Community,
I need help determining how to handle three separate events that may be related to a single monitoring tool issue. Each event could be triggered by a different alert. If the top-level alert is triggered, the lower-level alerts should be suppressed. However, if the top-level alert is not triggered, each lower-level alert should be triggered independently.
Any pointers?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-16-2024 03:03 PM
Hi @RRolling ,
What is closest to what you described, is rule-based alert group.
Please check link https://docs.servicenow.com/bundle/xanadu-it-operations-management/page/product/event-management/con....
Also, log into your PDI, and check Alert correlation rule ("Alert correlation rule SAMPLE"), to guide you on how to develop it.
Important to have in mind the following:
1- Primary and secondary alert.
2- Time window for scenario you described, to happen.
Kindest Regards,
Rodrigo Donnangelo