I have the following alert to create an “Incident”:
Subject "SERVICE MANAGEMENT DEVICE DOWN"
Body “Critical 10/10/2017 15:17:03 GW-TEST-MPLS-01 Device Down”
and I want a similar alert to auto resolve the “Incident”:
Subject "SERVICE MANAGEMENT DEVICE RESPONDING"
Body “Normal 10/10/2017 15:18:18 GW-TEST-MPLS-01 Device Responding to Poll”
I’ve tried the following trigger and resolve…
But it doesn’t work. Both alerts create a separate “incident”.
I’ve had success with other services, but they have the key in the subject line, which I’m unable to change for this service.
This is also the first service where I am trying to use a key between two text strings.
I’m a novice with Regular Expressions, so would appreciate any help.