Automatic Suppression
Suppression flags incidents that look like known noise. When you first turn it on, the L1 Agent recommends which incidents to snooze and a person applies each recommendation. Automatic snoozing stays off until you let the agent act on its own.
How suppression works
The agent judges whether an incident matches known noise. [VERIFY] Inputs it uses, for example past snoozes, flapping history, or resolution notes.
It recommends a snooze and shows its reasoning. [VERIFY] Where the recommendation appears: incident feed, incident details, or ServiceNow.
A person decides whether to snooze the incident.
Settings
Setting | Behavior |
|---|---|
Manually triggered + Suggests | Starting value. Recommends when someone triggers the agent. A person snoozes. |
Every incident + Suggests | Recommends on every new incident. A person snoozes. |
Every incident + Acts on its own | [VERIFY] Snoozes incidents the agent judges to be noise, so they do not reach a responder. Confirm this is available at launch. |
Off | Does not run. [VERIFY] |
Review recommendations before acting
Run Suppression on Suggests across a representative week of incidents before you set it to Acts on its own. A wrong snooze hides a real incident from responders.
[VERIFY] How to undo a snooze the agent applied, and where its actions are logged. [STUB]
Next steps
Change suppression settings in Configure the L1 Agent.
Group related incidents with Incident Correlation.
Read how suppression fits L1 automation in the L1 Agent overview.