Link an Knowledge article to alerts

[kallsjon]

How do I link for example: Service XX down - action required to an Knowledge Article containing the alert instruction?
To summarize: I want the knowledge article containing the alert instruction attached to the incident in Service Now.

Thanks in advance

[livehybrid]

Hi @kallsjon 

You could look to add your knowledge base link into the "Short Description" or "Custom Fields" section of the alert action which raises the event in ServiceNow? (See https://splunk.github.io/splunk-add-on-for-servicenow/Usecustomalertactions/#:~:text=not%20be%20refl...)

In order to populate the field you'll need the value to be defined in your results, you might find that a lookup CSV to lookup between your service name/ID and output your KB URL would be good for this, and then feed the field with that URL into your alert action.

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

[kallsjon]

Thanks! Def will look into it and revert back later.