Default incident creation policies
IBM Cloud Pak® for AIOps provides two preset (or default) incident creation policies. For incident creation to occur, you must enable one of these default policies, or create your own custom incident creation policy. These policies are disabled by default.
Default incident creation policy for high severity alerts
This policy proposes an incident based on a Major or Critical severity alert. The policy contains one condition set and action.
Condition set 1
If this condition is met:
| Property | Operator | Matches | Value |
|---|---|---|---|
| Value of: alert.severity | greater or equal | only | 5-Major |
The following action is taken: Create a Priority 1 incident.
Default incident creation policy for all alerts
This policy proposes an incident based on any alert. The policy contains the following condition sets and actions.
Note: In incident policies, only the actions from the first matching condition set are executed.
Condition set 1
If this condition is met:
| Property | Operator | Matches | Value |
|---|---|---|---|
| Value of: alert.severity | equal to | only | 1-Indeterminate |
The following action is taken: Create a Priority 5 incident.
Condition set 2
If this condition is met:
| Property | Operator | Matches | Value |
|---|---|---|---|
| Value of: alert.severity | equal to | only | 2-Information |
The following action is taken: Create a Priority 4 incident.
Condition set 3
If this condition is met:
| Property | Operator | Matches | Value |
|---|---|---|---|
| Value of: alert.severity | equal to | only | 3-Warning |
The following action is taken: Create a Priority 3 incident.
Condition set 4
If this condition is met:
| Property | Operator | Matches | Value |
|---|---|---|---|
| Value of: alert.severity | equal to | only | 4-Minor |
The following action is taken: Create a Priority 2 incident.
Condition set 5
If this condition is met:
| Property | Operator | Matches | Value |
|---|---|---|---|
| Value of: alert.severity | greater or equal | only | 5-Major |
The following action is taken: Create a Priority 1 incident.