Associate past incident with new alerts

Marc-Antoine Sulmon

Hi,

I would like to know if OpsGenie is able to provide or suggest some past incident when a certain pattern of alerts are coming.

For instance, one day we receive this pattern of alert :

- Alert "ABC"

- Alert "AZE"

- Alert "MNO"

Those alerts are associated to an incident. They incident is solved and some actions to solve the issue are logged into the incident. Those actions could help any futur analysis and mitigation action.

 

Then few days later, OpsGenie receive the same pattern of alert :

- Alert "ABC"

- Alert "AZE"

- Alert "MNO"

Is their any functionality to indicate to the responder that a past incident has been created and it could be helpful for him to have a look in the remediation plan ?

 

Thanks for your help on this !

Regards

 

 

 

 

Connor Eyles

Hi @Marc-Antoine Sulmon 

Thanks for reaching out!

This is an interesting one, what I'm thinking is making use of auto incident creation rules here.

When you start to see a pattern occur for an incident for example:

• Alert "ABC"
• Alert "AZE"
• Alert "MNO"

You can create an Incident rule to match this pattern and assign it to a service. When this pattern occurs again this will create an incident for that service and your engineers can see previous Incidents for that service to find the remediation plan.

The great thing about the Incident rules is during the Incident and more alerts come filtering in, if they match the Incident rule and the Incident is open they will be auto associated to the open Incident. 

Let me know how you feel about this suggestion and I can elaborate further if you would like!

The document for the Incident rules is - https://support.atlassian.com/opsgenie/docs/automatically-create-an-incident-via-incident-rules/ 

Thanks,

Connor