(function postprocessing(scomAlertRecord, createdTask) {
    // Use the below code to further update your incident or task and customize the record created.
    // scomAlertRecord = the inbound SCOM alert from your Management Group, as detailed in the SCOM Alerts table
    // createdTask = the Incident or Task created from the first tab of your creation rule
    // createdTask.cancelCreation = a boolean indicating whether this task creation should be canceled

    // Update the description to be the alert name and the server name
    createdTask.description = scomAlertRecord.name + 'on server ' + scomAlertRecord.principalname;

    // Programatically setting Impact and Urgency
    var scomPriority = scomAlertRecord.getValue('priority');
    var scomSeverity = scomAlertRecord.getValue('severity');
    if (scomSeverity == 'Error') {
        if (scomPriority == 'High') {
            createdTask.impact = 1;
            createdTask.urgency = 2;
        } else {
            createdTask.impact = 2;
            createdTask.urgency = 2;
        }
    } else if (scomSeverity == 'Warning') {
        if (scomPriority == 'High') {
            createdTask.impact = 2;
            createdTask.urgency = 2;
        } else {
            createdTask.impact = 2;
            createdTask.urgency = 3;
        }
    } else if (scomSeverity == 'Information') {
        createdTask.impact = 3;
        createdTask.urgency = 3;
    }


})(scomAlertRecord, createdTask);

(function postprocessing(scomAlertRecord, createdTask) {
	// Use the below code to further update your incident or task and customize the record created.
	// scomAlertRecord = the inbound SCOM alert from your Management Group, as detailed in the SCOM Alerts table
	// createdTask = the Incident or Task created from the first tab of your creation rule
	// createdTask.cancelCreation = a boolean indicating whether this task creation should be canceled

	// ---------------------------------------------
	// Re-opening existing task/incident example script
	// ---------------------------------------------

	//Figure out what table we are using for this creation rule
	var Table = createdTask.getTableName();
	
	// Create a GlideRecord object which we'll use for searches
	var gr = new GlideRecord(Table);
	
	// ------------------------------------------------------------------
	// Configure the incident values, combinding some SCOM properties
	// ------------------------------------------------------------------
	
	// We will append the object name to the short description for user convinence
	createdTask.short_description = scomAlertRecord.name + ' - ' + scomAlertRecord.monitoringobjectfullname;
    
	// Short description must match and state must be 6 (Resolved)
	gr.addQuery('short_description', createdTask.short_description);
	gr.addQuery('state', 6);
 
	// Execute the query and proceed to check for results 
	gr.query();
	
	// ------------------------------------------------------------------
	// Create or update a task based on the search results
	// ------------------------------------------------------------------
 
	if (gr.next()) {
		// Existing record found, change the status to In Progress
		gr.state = 2;
		gr.work_notes = 'Re-opened from SCOM Alert';
		gr.update('Re-opened from SCOM Alert');
 
		// Store the existing record to our SCOM record
		scomAlertRecord.incident = gr.sys_id;
		
		// Add note to alert history tab to indicate what happened there as well
		scomAlertRecord.alert_activity = 'Found existing ' + Table + ' ' + gr.number;
		
		// Cancel the creation of new task as we have found an existing one that matches
		createdTask.cancelCreation = true;
 
    } else {
		// No matching incidents, continue with creation
    }
})(scomAlertRecord, createdTask);

(function postprocessing(scomAlertRecord, createdTask) {
    // Use the below code to further update your incident or task and customize the record created.
    // scomAlertRecord = the inbound SCOM alert from your Management Group, as detailed in the SCOM Alerts table
    // createdTask = the Incident or Task created from the first tab of your creation rule
    // createdTask.cancelCreation = a boolean indicating whether this task creation should be canceled

	// ------------------------------------------------------------------
	// Linking to third party dashboarding example script
	// ------------------------------------------------------------------
	
	// Set a variable to build up the note in
	var Worknote;
	
	// Set our base addresses so we don't have to repeat ourselves 
	var Address = 'https://monitoring.domain.tld/drilldown';
	var AzurePortal = 'https://portal.azure.com#@domain.tld/resource';
	
	// Build up a link to the alert dipping into HTML where required
	// On click open it in a new window
	Worknote = 'Alert Dashboard: [code]<a href="' + Address + '/scomalert?id=' + scomAlertRecord.alertid.toString() + ' "target="_blank">' + scomAlertRecord.name.toString() + '</a>[/code]' + '\n';
	
	// Build up a link to the object dipping into HTML where required
	// On click open it in a new window
	Worknote = Worknote + 'Object Dashboard: [code]<a href="' + Address + '/scomobject?id=' + scomAlertRecord.monitoringobjectid.toString() + ' "target="_blank">' + scomAlertRecord.monitoringobjectdisplayname.toString() + '</a>[/code]' + '\n';
	
	// If this is from the Azure Management pack link directly to the portal
	// You would probably make checks like this from the Creation Rule filter 
	// However if there is an indicator in the alert context or CI you would probably make that check here instead
	if (scomAlertRecord.managementpackname == 'Microsoft.SystemCenter.MicrosoftAzure') {
		Worknote = Worknote + 'Azure Portal: [code]<a href="' + AzurePortal + scomAlertRecord.monitoringobjectname.toString() + ' "target="_blank">' + scomAlertRecord.monitoringobjectdisplayname.toString().split(' ')[0] + '</a>[/code]' + '\n';
	}
	
	// Assign the details built above to a worknote on the raised task
	createdTask.work_notes = Worknote;
	
})(scomAlertRecord, createdTask);

(function postprocessing(scomAlertRecord, createdTask) {
    // Use the below code to further update your incident or task and customize the record created.
    // scomAlertRecord = the inbound SCOM alert from your Management Group, as detailed in the SCOM Alerts table
    // createdTask = the Incident or Task created from the first tab of your creation rule
	
	var grAlert = new GlideRecord("x_oklt_cookdown_sc_scom_alerts");
	
	// Find alerts from the last 30 days
	grAlert.addQuery('timeraised', '>=' ,gs.beginningOfLast30Days());
	
	// With the same Object ID
	grAlert.addQuery('monitoringobjectid',scomAlertRecord.monitoringobjectid);
	
	// With the same Rule/Monitor
	grAlert.addQuery('workflowname',scomAlertRecord.workflowname);
	
	// Where a task/incident was raised
	grAlert.addNotNullQuery('incident');
	
	// Put the first record rasied first
	grAlert.orderByDesc('timeraised');
	
	// Execute Query
	grAlert.query();
	grAlert.next();
	
	// We assume here that if the newest Task/Incident doesn't have a problem that none of them do
	// You may need additional logic here if this does not fit your scenario
	
	if ((grAlert.getRowCount() >= 4) && (grAlert.incident.getRefRecord().problem_id != '')) {
		// If this is the 5th (or greater) ticket and there is an existing problem
		
		//Log the scenario (pulling details from linked records)
		scomAlertRecord.alert_activity = "Found " + grAlert.getRowCount().toString() + " matching records and an existing problem: " + grAlert.incident.getRefRecord().problem_id.getRefRecord().number;
		
		// We have previously raised a problem, link it to the new Incident/Task
		createdTask.problem_id = grAlert.incident.getRefRecord().problem_id;
		
	} else if (grAlert.getRowCount() >= 4) {
		// If this is the 5th (or greater) ticket and there is no existing problem
		
		//Log the scenario
		scomAlertRecord.alert_activity = "Found " + grAlert.getRowCount().toString() + " matching records and no existing problem";

		// Start work against the problem table
		var grPrb = new GlideRecord("problem");
		
		// Start the new record
		grPrb.initialize();
		
		// Short description is mandatory 
		// You may wish to populate other fields, the createdTask properties can be a good reference point as they should line up
		grPrb.short_description = "Problem raised to deal with repeated " + scomAlertRecord.name + " alerts from " + scomAlertRecord.monitoringobjectdisplayname;
		
		// Set the first reported task to the incident raised by the first recorded SCOM alert
		grPrb.first_reported_by_task = grAlert.incident;
		
		// Insert the record and link the task
		createdTask.problem_id = grPrb.insert();
		
		// Log the created problem number
		scomAlertRecord.alert_activity = "Raised a new problem: " + grPrb.number;
		do {
			// Loop through each alert matching alert
			
			// Look up the incident
			var incident = grAlert.incident.getRefRecord();
			
			// If no existing problem, set the corresponding problem
			// Despite the assumtions earlier we don't want to clobber other problems if they exist
			if (! incident.problem_id) {
				// Set the problem
				incident.problem_id = createdTask.problem_id;
				
				// Update the incident
				incident.update();
			}

		} while (grAlert.next());
	}
	else {
		// Log the scenario
		scomAlertRecord.alert_activity = "Found " + grAlert.getRowCount().toString() + " matching records, not raising a problem";
	}
	
	// Finish and let the creation rule deal with creating the current incident
})(scomAlertRecord, createdTask);