Trigger orchestration workflow when Event/Alert is created in service now .

Manish Shetty2 · ‎03-11-2018

Hello Experts,

I am new to servicenow and just started learning.i need your support and guidance to achieve following requirement in servicenow.

We have a requirement where Monitoring tool sends event to service now saying process is down. event/alert in service has details like Description :(process is down) ,nodename: (name.of.node.com) and metric_name:(processname).

now as soon as i receive this alert i want to trigger a orchestration workflow which will use power shell to start the process on the host .

is it possible to trigger a orchestration workflow when event/alert is generated in service now ? if yes how can i use value in nodename & metric name of alert in orchestration workflow ?

following command i want to run using "runpower shell script" activity .

WMIC PROCESS CALL Create "processname.exe"

Processname & hostname i want to dynamically pass to workflow from event/alert variable.

Looking forward for your support & thanks in advance 🙂

Thank You,
Manish

Report Inappropriate Content · ‎03-12-2018

Hi Manish,

In service now event management we have the functionality to trigger particular workflow when the alert is generated. We can achieve this using Alert Action Rule in which we can specify the condition to meet that will generate an alert. As soon as the condition is met we can trigger the workflow defined in Remediation.

Go to Alert Action Rule=>Specify Condition=>select Remediation=>select the workflow which should be executed when alert is generated. If you select Manual Remediation- You can decide that if you want to run the workflow or not and if you select Automatic- SNOW will automatically execute that workflow.

While creating the workflow you can use the information which is coming the the event e.g process name and node name in your workflow.

Hope this answer helps you!

Regards,

Kiran

View solution in original post

Uncle Rob · ‎03-11-2018

So workflows (recommend you read a ton of this docs site page) are always run in the context of an existing record. Your first problem isn't "how do I launch workflow", but rather "where are these events going to be stored".

I know there's a distinct Event Management module in ServiceNow, but I'm guessing that's too big a slice for this single use case.

So I'd create a quick table called "inbound events" or something. You drop all the sent information there. Then you define a workflow that triggers from the record.

Manish Shetty2 · ‎03-11-2018

Hello Robert,

Many thanks for your response & i appreciate your support 🙂

suppose i create a custom table "inbound_events" with columns nodename , metric_name, Description. how can i insert event data in this custom table ?

is it possible to run a business rule when new alert/event is created so that it inserts event information in custom event table?

Thank you,
Manish

VivekSattanatha · ‎03-11-2018

Hi Manish,

The below link will help you setup Remediation workflow for generated alerts

https://docs.servicenow.com/bundle/kingston-it-operations-management/page/product/event-management/reference/r_SAAlertandCIRemediation.html

Regards,

Vivek

Manish Shetty2 · ‎03-11-2018

Hello Vivek,

Many thanks i will go through it .

Thank You,

Manish