Link to the workflow.

This workflow creates a ServiceNow ticket whenever an alert from Grafana or Prometheus is triggered.

Explanation:

  • Trigger: Activated by alerts from Grafana or Prometheus.
  • Action: If the alert does not already have a ticket ID, create a ServiceNow ticket and enrich the alert with details like ticket ID, URL, and status.
workflow:
  id: servicenow
  description: create a ticket in servicenow when an alert is triggered
  triggers:
    - type: alert
      cel: source.contains("grafana") || source.contains("prometheus")
  actions:
    - name: create-service-now-ticket
      if: "not '{{ alert.ticket_id }}' and {{ alert.annotations.ticket_type }}"
      provider:
        type: servicenow
        config: "{{ providers.servicenow }}"
        with:
          table_name: "{{ alert.annotations.ticket_type }}"
          payload:
            short_description: "{{ alert.name }} - {{ alert.description }} [created by Keep][fingerprint: {{alert.fingerprint}}]"
            description: "{{ alert.description }}"
          enrich_alert:
            - key: ticket_type
              value: servicenow
            - key: ticket_id
              value: results.sys_id
            - key: ticket_url
              value: results.link
            - key: ticket_status
              value: results.stage