Alert Rules Management helps you respond to alerts using automation to reduce MTTR. With Alert Rules Management organizations can create filters to specify conditions for a rule so that the remedial action specified in the rule takes effect only when the conditions are met. For example, creating a filter to launch the required sub-flow or open an incident based on an alert. The alert's execution history is automatically updated to indicate which actions were invoked.

Users with the evt\_mgmt\_admin role can use the alert management rule designer to create and customize Alert Rules Management to act on specified alerts. Define rules with filters to determine which alerts the rule applies to and create rules to:

- Automatically generate and link incidents, tasks, or knowledge articles to alerts.
- Automatically apply a remediation workflow or enable users to manually run remediation.
- Automatically construct a URL according to the value of specified fields in the alert.

Alert Rules Management can also take other actions, such as opening an incident.

Alert rules management are called "Respond automations" in Service Operations Workspace within Alert Automation. The alert form in the Service Operations Workspace provides the user with a list of remediation actions that can be invoked by the user. In addition, it also provides a quick launch of context options of third-party tools from the alert form. The list of actions or applications presented to the user is based on the Alert Rules configuration. 

Alert Rules Management ("Respond automation" in Service Operations Workspace) helps users to:

- Automatically invoke a sub-flow to remediate an alert.
- Provide a list of remediation actions on the alert form for operators to invoke manually.
- Launch in-context, third-party applications from the alert form.