When a rule, configured with an ServiceNow ITSM action, triggers and an alert is created an incident in ServiceNow is open. If the rule fires again and a correlation ID is configured the same incident will be updated. If the incident is closed the incident is still updated. We should open a new incident or reopen the existing one if needed. We can make it configurable so users can choose the behavior they want. The same applies to Cases.
This feature needs changes to the Elastic ServiceNow application and we will need to release a new version.
When a rule, configured with an ServiceNow ITSM action, triggers and an alert is created an incident in ServiceNow is open. If the rule fires again and a correlation ID is configured the same incident will be updated. If the incident is closed the incident is still updated. We should open a new incident or reopen the existing one if needed. We can make it configurable so users can choose the behavior they want. The same applies to Cases.
This feature needs changes to the Elastic ServiceNow application and we will need to release a new version.
cc @pmuellr @shanisagiv1