[Actions][ServiceNow] Close issue when an alerts resolves

[cnasikas]

Summary

A rule with a ServiceNow connector configured will create a new incident to ServiceNow when it triggers. Based on the correlation ID it will either create or update an incident. The framework supports taking different actions based on the state of the alert, triggered or resolved. Some connectors like the PagerDuty already support closing an incident when the alert resolves. We need to support the same for the ServiceNow ITSM connector. We will follow the same pattern followed with PagerDuty.

Example of PagerDuty configured to recover

DoD

• Create a sub action to allow to close an incident based on the correlation ID through the ServiceNow ITSM action API
• Let users configure in the UI how the connector will run when the alert recovers

Out of scope

• Reopen an incident if it is already closed/resolved
• New context variables
• No SN incident properties will be modified when the incident is closed other than the incident change of state itself, the close_code, and the close_notes

Related: #83221, #162557

[heespi]

Could we call out in the "out of scope" section that no SN incident properties will be modified when the incident is closed other than the incident change of state itself?

[cnasikas]

Ok! close_code and close_notes are required fields when closing an incident. I also added them to the DoD.