Event Rule: How to create an Alert for every event occur?

[Rajat15]

I want to create new alert for every Event. I tried by giving threshold as below but it is not working:

count 

occurs= 1

over(seconds)=10

[benny_makovsky]

This is bad practice. Events are aggragted based on the message key. As long as message key is the same, all events will be assigned to the same alert. Theoretically you can can modify the message key to be unique (by origin or by event rules) but this not recommended. You don't want to overload your alerts table. Worth rethinking the use case.

[Richard Hine]

Rajat,

I am struggling to understand what the use case could be for this, perhaps you could elaborate?

Richard

[Rahul Priyadars]

As suggested rethink on use case Why- Support team will bombarded and operation will have to give lot of answers.

Server 1

70% CPU threshold breached - INC1 (Lower Priority)

90% CPU threshold breached- INC1 (High)

98% CPU threshold breached- INC1 (Critical)

for same server CI  and similar metric you want to spin 3 Incidents this is what ur use case is.

OOTB Service Now EM does event de-duplication based on message_key attribute.

Regards

RP

[Rajat Singhal1]

Yes, It is a bad practice however I am able to achieve this by putting timestamp in the Message_key