Is there a way to delay the creation of an incident ticket

[Dan White]

We currently have a number of monitoring tools feeding into SN (PRTG, Dynatrace ...).  We are looking for a way to delay the creation of an alert ticket for xx amount of time to make sure that the monitoring tool does not send an all clear response.  Example: PRTG throws an error because a CPU sensor detects a low memory situation.  It throws an error that is then transmitted to SN.  We have an alert rule monitoring for that situation which would create a ticket.  In the meantime the low memory situation resolves itself and PRTG throws an all clear message to SN, thus making the incident moot.  If we could delay ITOM from creating the ticket for say a minute, the all clear would be there and thus eliminating the need to create the ticket.

Thanks for the help

[robertgeen]

From what I remember you just select the wait timer and then provide it a number of seconds to wait. Should be that easy in the subflow itself as the first step.