Auto close Opsgenie associated alerts

[Peter Tung]

We would like to auto close "Associated alert" created by Opsgenie's Incident rule, we have setup close alert policy and it doesn't seem to work, anyone know what could be done to achieve this?  Many thanks!

[Skyler Ataide]

Hey @Peter Tung! 

The reason that the current Notification Policy that you shared isn't working is due to the alert creation flow. Before an alert gets created Global/Team policies are checked first, then the alert gets created > then triggers incident rule > creates the incident > then the alert becomes associated with the incident and the extra properties are added. There are a couple workarounds to this flow that are possible to close associated alerts: 

1. Use an Alert Policy to filter for alerts that will match your configured Incident Rules, and then use that Alert Policy to tag these alerts. Then, create a Notification Policy that filters for this tag to auto close those alerts. 
2. Create a Notification Policy that filters for the same criteria as your Incident Rules, this way any alerts that match your Incident Rules will also match the Notification auto close policy. 

Hopefully this information helps! 

[Peter Tung]

Thanks for the answer @Skyler Ataide !  I'll be trying out both solutions and see which one works best for us.  Cheers.