Alert-to-ticket automation

The Create ticket from alert action automatically groups related alerts and prevents duplicate tickets, without any additional configuration.

How grouping works

Alerts are grouped by client, end-user, and asset. The same alert type from different clients always creates separate tickets. The same alert type from the same asset is grouped into a single ticket.

How duplicate tickets are prevented

Before creating a new ticket, the action checks whether an open ticket already exists for the same issue:

• If an open ticket exists, the new alert is linked to it, and no new ticket is created.
• If no ticket exists, or existing tickets for the issue are Closed, a new ticket is created.