See all incidents created by an alert

Henrik Jutterst
Tera Guru

The Task field on an Alert only shows the current/latest incident related to an Alert, but how/where can I see all the incidents that's related to an Alert? Is there a way for this?

 

I thought it was easy to find, but I haven't found it yet, and since there's no audit on task field on em_alert table, I can't see it in the history either.

 

I need a clean and simple view to see all INCs that been created from one Alert.

If I calculate related incidents to an Alert, it's not showing all INCs related to the Alert, but incidents related to the same CI.

HenrikJutterst_1-1680168117163.png

 


The worknotes of an incident show when an alert is unlinked from an Alert - sort of what I'm looking for, but not in one incident at the time:

HenrikJutterst_0-1680167823313.png



But again; where can I see all incidents that was created by one Alert?

6 REPLIES 6

If u need these kind of Data Points then - we need to define too....

Let Say 

DISK FULL 90% - Whatever Description comes after its fine

CPU SPIKE 95%--

Windows Host Down --

 

These fixed text send from Monitoring Tool end to Service Now - Then you can think of a perfect data point for ur reports.

 

Regards

RP

pratiksha5
Mega Sage

Check the alert execution in the related list. It will show the number of time the flow has triggered to create the incident. You need to check flow execution.