Trigger incident creation based on the presence of 2 or more alerts

User Problem

When a service failure occurs, various alerts are received from the monitoring tool. These alerts are created as individual alerts so have their own alias. 

Having multiple alerts from various systems can cause alert fatigue and the only way to reduce noice is having the alerts deduplicate. We want an incident raised when a condition is met across 2 or more seperate alerts.

Example: We want to automatically create an Incident when two events occur within 5 minutes. 

Suggested Solutions

• Create a policy that can check conditions across multiple alerts and then perform an action like create an Incident.

Current Workarounds

None.