Put an alert into maintenance
As an Event Management operator, you can put an alert into maintenance if the alert does not require any further action, but you still want to keep the alert active. Putting the alert into maintenance hides it from the Service Operations Workspace dashboard so that other operators do not need to access it, but it does not close the alert.
Before you begin
Note: The Operator Workspace interface is available only to customers who have upgraded from a release prior to the Utah release. New customers as of the Utah release can use the Service Operations Workspace for ITOM, which offers an enhanced UI for managing alerts.
| Phase 1 | Image omitted: progress-complete2.png Analyze icon | Analyze and acknowledge an alert |
| Phase 2 | Image omitted: progress-wip.png Triage icon | Triage alerts |
| Phase 3 | Image omitted: progress-not-started.png Close alert icon | Close an alert |
Role required: evt_mgmt_operator
Procedure
From the Service Operations Workspace dashboard, open the alert that you acknowledged in Phase 1: Analyze and acknowledge an alert.
Select the Maintenance check box and click Update, or click the Maintenance button at the top of the list.
Click Update.
Navigate to Event Management > Operators Workspace.
Notice that alerts in maintenance are not visible in the list by default. The filter excludes alerts where
Maintenance|=|true.
filter
What to do next
If the issue that led to the alert still needs further attention later, navigate to Event Management > All Alerts, open the alert, and then clear the Maintenance check box and click Update. From there you can perform other triage actions.
There are other tasks you can take as part of the triage stage:
- Run a remediation workflow on an alert if your Event Management administrator already set up a workflow in your ServiceNow instance and your policies allow you to trigger it from the alert.
- Launch a web application from an alert to open a website or an event monitoring tool that provides more information about the alert.
- Associate a knowledge base article with an alert if there is existing information about the alert that might help resolve the underlying issue.
If you do not need to perform any other triage actions, proceed to Phase 3: Close an alert.
Parent Topic:Operator phase 2: Triage an alert