Hi,
Really new to ITSI.
Already installed Splunk and ITSI on my customer site and read a lot of documentation.
I created a custom alert action (alert_action.conf and notable_alert_action.conf, don't remember exactly) in order to create a ticket to an external ticketing system accepting REST calls.
So also created a script in ../bin directory.
When I call the targeted ticketing system with REST POST, I get the INC number of the ticket created.
I would like to update the episode with this inc number in a specific field but didn't find similar situation here.
Can you help me ?
thank you in advance
