Synthetic Rules - Active & recovered states - Incident Create & update

c.m
Wed, 10 Dec 2025 03:52:01 +0000
Elastic Observability

Hi,

I am trying to capture ‘Active & Recovered ‘ events for a synthetic monitor so that i can update Incident in SNOW now.

Setup: Have synthetic monioring setup for a website. Have a syntheric & uptime rule setup. Have SNOW ITSM connector setup.

Goal: When DOWN alert is triggered, would like to create an Incident in SNOW using ITSM connector. And when item is recovered want the same Incident just updated with “recovered” status to reflect status accurately.

Having a hard time capturing active & recovered events & hence unable to do create/update of Incident in SNOW.

Appreciate any help with this

2 posts - 2 participants