ServiceNow - Configuring a DOWN only alert

I want to configure two ServiceNow integrations, one that creates a high priority ServiceNow incident ONLY when a host goes DOWN.

The other will produce incidents based on when services become critical.

Is this possible?

I tested by creating the two rules as below but no notifications were sent.

I read in the documentation for notifications : " Should you select only Match host event type, the rule will match no single service event. Similarly, this applies to the selection of Match service event type and host events. Should you activate both conditions however, the rule will match if the event type is activated in any of the two checkbox lists. In this exceptional case these conditions will thus not be linked with a logical ‘AND’, but rather with an ‘OR’. In this way you can simply administer host and service notifications with a single rule."

But what If we need to create a priority 1 incident where we only can select ‘Impact’ and ‘Urgency’ to be ‘High’, but then also need a separate incident to be created for when services go critical?
How is this possible?

Host DOWN Only

Critical

I think this is working ok, however during the DOWN incident I did notice that after the server was brought back online we then received a second incident regarding the checkmk service, is this normal?

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.