Actual requirement is when status field values are changed from one to another alert needs to be triggered
below are the status field values
Extended recovery
Investigation suspended
False positive
Investigating
Service degradation
Service restored
Restoring service
Post-incident report published
Ex: if status field value from false positive to investigating then alert should be triggered
If field value false positive to false positive then no alert should be triggered.
↧