Escalating incidents based on number of same alerts


Is there a way to have an incident come in as a lower severity if there is only, let’s say, 1 trigger. If there are several more identical triggers within a certain time period, can the severity of the incident be automatically raised?

Reason being… we are alerting on a service. We aren’t as concerned if we get one of these types of triggers if it is isolated. We want an incident created, but not waking someone up at 2am. If we receive 5 in a row, then we would want to wake someone up.



There is a feature which is part of the Event Intelligence package that allows Incidents to be triggered only after a particular threshold. More on that feature here. Would that be the sort of feature you are enquiring about? If it is, you can reach out to your Account Rep to have a conversation round that.


This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.