- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2024 12:53 AM
Hello everyone,
I would like to know if there is a way, through business rules or any other method, to create incidents only for the parent alert and not for the child alerts that are generated. I am attaching an image. Thanks in advance
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2024 09:21 AM
Check the trigger condition for this. It should work.
Please accept the answers and mark them helpful 🙂
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2024 01:19 AM
alert management rule - > trigger condition should check if the parent field is empty on the alert. Also, you can make sure that incident is getting created only for primary alerts.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2024 02:05 AM
Hi @Pratiksha ,
My filters are set up like this, but I still see alerts that are part of a group, such as the secondary group, continue to generate incidents:
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2024 03:25 AM - edited 06-27-2024 03:54 AM
Group should be primary or empty.
Also, OOB their is an alert management rule for primary alerts. Check it out in your PDI
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-27-2024 08:09 AM
Thank you very much, @Pratiksha I have achieved my goal, but I still have one question: regarding alerts that have the group CMDB, how do these alerts behave and why do they never trigger incidents? Thank you very much in advance!