How can Service Now incidents be created automatically when a Multi-KPI alert triggers? (select all that apply)

Question

Options

• ABy creating a custom etc/apps/SA-lTOA/workflow_rules. conf
• BBy linking Entities to Service-Now configuration items.
• CBy creating a notable event aggregation policy with a ServiceNow (SNOW) incident action:
• DBy editing the associated correlation search and specifying an alert action: Correlation

• A
  17% (7)
• B
  7% (3)
• C
  76% (32)

Explanation

To automatically create ServiceNow incidents when a Multi-KPI alert triggers in Splunk IT Service Intelligence (ITSI), the following approaches can be used: ITSI allows the creation of notable event aggregation policies that can specify actions to be taken when certain conditions are met. One of these actions can be the creation of an incident in ServiceNow, directly linking the alerting mechanism in ITSI with incident management in searches in ITSI are used to identify patterns or conditions that signify notable events. These searches can be configured to include alert actions, such as creating a ServiceNow incident, whenever the search conditions are met. This direct integration ensures that incidents are automatically generated in ServiceNow, based on the specific criteria defined in the correlation

No community discussion yet for this question.