Configure alert remediation actions

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：3分

    • Run commands to perform alert remediation on remote Linux and Windows CIs.

    始める前に

    Install the following plugins:
    • IntegrationHub Enterprise spokes plugin
    • ServiceNow IntegrationHub Action Step - PowerShell
    • ServiceNow IntegrationHub Action Step - SSH

    For Linux: Ensure that the remote Linux host is reachable using the MID Server IP address that runs action scripts.

    For Windows:
    • Ensure that Powershell v3.0 - 5.0 are supported and installed on the Windows target server.
    • Enable Powershell remoting on the remote Windows target server.
    • Ensure that the remote Windows target server is reachable using the FQDN from the MID Server that runs action scripts.
    Add credentials to the credential aliases that come with the base system:
    • linuxAdmin
    • windowsAdmin

    Role required: evt_mgmt_admin or flow_designer

    手順

    1. Access remediation actions in one of the following ways:
    2. Configure additional input in the alert's Additional Information field, using this format:

      {"remediation_action_resource":"<mandatory input>"}

      The mandatory input per action is described in the following table.

      Action name Mandatory input in Additional information field
      Stop Windows Process Process ID
      Restart Linux Service Service Name
      Kill Linux Process Process ID
      Get Windows Processes N/A
      Stop Windows Service Service Display Name
      Restart Windows Service Service Display Name
      Get Windows Services N/A
      Stop Linux Service Service Name
      Start Windows Service Service Display Name
      Suspend Windows Service Service Display Name
      Get Linux Services N/A
      Run Linux Top for Memory N/A
      Show Disk Space Used N/A
      Run Linux Top N/A
      Start Linux Service Service Name
      Show Disk Space Used N/A

    タスクの結果

    After executing an alert action, the results are noted in the Work Notes field of the alert.