(function postprocessing(scomAlertRecord, createdTask) {
    // Use the below code to further update your incident or task and customize the record created.
    // scomAlertRecord = the inbound SCOM alert from your Management Group, as detailed in the SCOM Alerts table
    // createdTask = the Incident or Task created from the first tab of your creation rule
    // createdTask.cancelCreation = a boolean indicating whether this task creation should be canceled
 
    // Update the description to be the alert name and the server name
    createdTask.description = scomAlertRecord.name + 'on server ' + scomAlertRecord.principalname;
 
    // Programatically setting Impact and Urgency
    var scomPriority = scomAlertRecord.getValue('priority');
    var scomSeverity = scomAlertRecord.getValue('severity');
    if (scomSeverity == 'Error') {
        if (scomPriority == 'High') {
            createdTask.impact = 1;
            createdTask.urgency = 2;
        } else {
            createdTask.impact = 2;
            createdTask.urgency = 2;
        }
    } else if (scomSeverity == 'Warning') {
        if (scomPriority == 'High') {
            createdTask.impact = 2;
            createdTask.urgency = 2;
        } else {
            createdTask.impact = 2;
            createdTask.urgency = 3;
        }
    } else if (scomSeverity == 'Information') {
        createdTask.impact = 3;
        createdTask.urgency = 3;
    }
 
 
})(scomAlertRecord, createdTask);

(function postprocessing(scomAlertRecord, createdTask) {
    // Use the below code to further update your incident or task and customize the record created.
    // scomAlertRecord = the inbound SCOM alert from your Management Group, as detailed in the SCOM Alerts table
    // createdTask = the Incident or Task created from the first tab of your creation rule
    // createdTask.cancelCreation = a boolean indicating whether this task creation should be canceled
 
    // ---------------------------------------------
    // Re-opening existing task/incident example script
    // ---------------------------------------------
 
    //Figure out what table we are using for this creation rule
    var Table = createdTask.getTableName();
     
    // Create a GlideRecord object which we'll use for searches
    var gr = new GlideRecord(Table);
     
    // ------------------------------------------------------------------
    // Configure the incident values, combinding some SCOM properties
    // ------------------------------------------------------------------
     
    // We will append the object name to the short description for user convinence
    createdTask.short_description = scomAlertRecord.name + ' - ' + scomAlertRecord.monitoringobjectfullname;
     
    // Short description must match and state must be 6 (Resolved)
    gr.addQuery('short_description', createdTask.short_description);
    gr.addQuery('state', 6);
  
    // Execute the query and proceed to check for results 
    gr.query();
     
    // ------------------------------------------------------------------
    // Create or update a task based on the search results
    // ------------------------------------------------------------------
  
    if (gr.next()) {
        // Existing record found, change the status to In Progress
        gr.state = 2;
        gr.work_notes = 'Re-opened from SCOM Alert';
        gr.update('Re-opened from SCOM Alert');
  
        // Store the existing record to our SCOM record
        scomAlertRecord.incident = gr.sys_id;
         
        // Add note to alert history tab to indicate what happened there as well
        scomAlertRecord.alert_activity = 'Found existing ' + Table + ' ' + gr.number;
         
        // Cancel the creation of new task as we have found an existing one that matches
        createdTask.cancelCreation = true;
  
    } else {
        // No matching incidents, continue with creation
    }
})(scomAlertRecord, createdTask);

(function postprocessing(scomAlertRecord, createdTask) {
    // Use the below code to further update your incident or task and customize the record created.
    // scomAlertRecord = the inbound SCOM alert from your Management Group, as detailed in the SCOM Alerts table
    // createdTask = the Incident or Task created from the first tab of your creation rule
    // createdTask.cancelCreation = a boolean indicating whether this task creation should be canceled
 
    // ------------------------------------------------------------------
    // Linking to third party dashboarding example script
    // ------------------------------------------------------------------
     
    // Set a variable to build up the note in
    var Worknote;
     
    // Set our base addresses so we don't have to repeat ourselves 
    var Address = 'https://monitoring.domain.tld/drilldown';
    var AzurePortal = 'https://portal.azure.com#@domain.tld/resource';
     
    // Build up a link to the alert dipping into HTML where required
    // On click open it in a new window
    Worknote = 'Alert Dashboard: [code]<a href="' + Address + '/scomalert?id=' + scomAlertRecord.alertid.toString() + ' "target="_blank">' + scomAlertRecord.name.toString() + '</a>[/code]' + '\n';
     
    // Build up a link to the object dipping into HTML where required
    // On click open it in a new window
    Worknote = Worknote + 'Object Dashboard: [code]<a href="' + Address + '/scomobject?id=' + scomAlertRecord.monitoringobjectid.toString() + ' "target="_blank">' + scomAlertRecord.monitoringobjectdisplayname.toString() + '</a>[/code]' + '\n';
     
    // If this is from the Azure Management pack link directly to the portal
    // You would probably make checks like this from the Creation Rule filter 
    // However if there is an indicator in the alert context or CI you would probably make that check here instead
    if (scomAlertRecord.managementpackname == 'Microsoft.SystemCenter.MicrosoftAzure') {
        Worknote = Worknote + 'Azure Portal: [code]<a href="' + AzurePortal + scomAlertRecord.monitoringobjectname.toString() + ' "target="_blank">' + scomAlertRecord.monitoringobjectdisplayname.toString().split(' ')[0] + '</a>[/code]' + '\n';
    }
     
    // Assign the details built above to a worknote on the raised task
    createdTask.work_notes = Worknote;
     
})(scomAlertRecord, createdTask);

(function postprocessing(scomAlertRecord, createdTask) {
    // Use the below code to further update your incident or task and customize the record created.
    // scomAlertRecord = the inbound SCOM alert from your Management Group, as detailed in the SCOM Alerts table
    // createdTask = the Incident or Task created from the first tab of your creation rule
     
    var grAlert = new GlideRecord("x_oklt_cookdown_sc_scom_alerts");
     
    // Find alerts from the last 30 days
    grAlert.addQuery('timeraised', '>=' ,gs.beginningOfLast30Days());
     
    // With the same Object ID
    grAlert.addQuery('monitoringobjectid',scomAlertRecord.monitoringobjectid);
     
    // With the same Rule/Monitor
    grAlert.addQuery('workflowname',scomAlertRecord.workflowname);
     
    // Where a task/incident was raised
    grAlert.addNotNullQuery('incident');
     
    // Put the first record rasied first
    grAlert.orderByDesc('timeraised');
     
    // Execute Query
    grAlert.query();
    grAlert.next();
     
    // We assume here that if the newest Task/Incident doesn't have a problem that none of them do
    // You may need additional logic here if this does not fit your scenario
     
    if ((grAlert.getRowCount() >= 4) && (grAlert.incident.getRefRecord().problem_id != '')) {
        // If this is the 5th (or greater) ticket and there is an existing problem
         
        //Log the scenario (pulling details from linked records)
        scomAlertRecord.alert_activity = "Found " + grAlert.getRowCount().toString() + " matching records and an existing problem: " + grAlert.incident.getRefRecord().problem_id.getRefRecord().number;
         
        // We have previously raised a problem, link it to the new Incident/Task
        createdTask.problem_id = grAlert.incident.getRefRecord().problem_id;
         
    } else if (grAlert.getRowCount() >= 4) {
        // If this is the 5th (or greater) ticket and there is no existing problem
         
        //Log the scenario
        scomAlertRecord.alert_activity = "Found " + grAlert.getRowCount().toString() + " matching records and no existing problem";
 
        // Start work against the problem table
        var grPrb = new GlideRecord("problem");
         
        // Start the new record
        grPrb.initialize();
         
        // Short description is mandatory 
        // You may wish to populate other fields, the createdTask properties can be a good reference point as they should line up
        grPrb.short_description = "Problem raised to deal with repeated " + scomAlertRecord.name + " alerts from " + scomAlertRecord.monitoringobjectdisplayname;
         
        // Set the first reported task to the incident raised by the first recorded SCOM alert
        grPrb.first_reported_by_task = grAlert.incident;
         
        // Insert the record and link the task
        createdTask.problem_id = grPrb.insert();
         
        // Log the created problem number
        scomAlertRecord.alert_activity = "Raised a new problem: " + grPrb.number;
        do {
            // Loop through each alert matching alert
             
            // Look up the incident
            var incident = grAlert.incident.getRefRecord();
             
            // If no existing problem, set the corresponding problem
            // Despite the assumtions earlier we don't want to clobber other problems if they exist
            if (! incident.problem_id) {
                // Set the problem
                incident.problem_id = createdTask.problem_id;
                 
                // Update the incident
                incident.update();
            }
 
        } while (grAlert.next());
    }
    else {
        // Log the scenario
        scomAlertRecord.alert_activity = "Found " + grAlert.getRowCount().toString() + " matching records, not raising a problem";
    }
     
    // Finish and let the creation rule deal with creating the current incident
})(scomAlertRecord, createdTask);