Event Management: Keeping clear event from closing alert when alert has associated incident
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎03-27-2023 12:50 PM
If I have an active incident associated with an alert, I don't want clear events closing the alert. Otherwise, if there is no active incident, the clear event should go ahead and close the alert. Is there anyway to achieve this?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-21-2024 11:09 AM
Hi Chris,
You can stop auto closure of incident through alert which is closed. There is a property "when alert close" - simply set this property as do nothing instead of closure of incident.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-17-2025 01:40 AM
Check out those 2 script includes:
EvtMgmtCustom_PostBind_Create
EvtMgmtCustom_PostBind_Update
They allow you to manipulate with Alert, before it gets inserted into DB, after the Event Rule processing.