ITSM deprecation

Author: AbbyMSFT

articles/azure-monitor/alerts/itsmc-definition.md

@@ -2,21 +2,21 @@
 title: IT Service Management Connector in Log Analytics
 description: This article provides an overview of IT Service Management Connector (ITSMC) and information about using it to monitor and manage ITSM work items in Log Analytics and resolve problems quickly.
 ms.topic: conceptual
-ms.date: 2/23/2022
+ms.date: 10/03/2022
 ms.custom: references_regions
 ms.reviewer: nolavime
 
 ---
 
-# Connect Azure to ITSM tools by using IT Service Management solution
+# Connect Azure to ITSM tools by using IT Service Management
 
 :::image type="icon" source="media/itsmc-overview/itsmc-symbol.png":::
 
 This article provides information about how to configure IT Service Management Connector (ITSMC) in Log Analytics to centrally manage your IT Service Management (ITSM) work items.
 
-## Add IT Service Management Connector
+##  IT Service Management Connector
 
-Before you can create a connection, install ITSMC.
+Before you create a connection, install ITSMC.
 
 1. In the Azure portal, select **Create a resource**.
 
@@ -43,9 +43,7 @@ When the ITSMC resource is deployed, a notification appears in the upper-right c
 
 ## Create an ITSM connection
 
-After you've installed ITSMC, create an ITSM connection.
-
-After you've prepped your ITSM tool, follow these steps to create a connection.
+After you've installed ITSMC, and prepped your ITSM tool, create an ITSM connection.
 
 1. [Configure ServiceNow](./itsmc-connections-servicenow.md) to allow the connection from ITSMC.
 1. In **All resources**, look for **ServiceDesk(*your workspace name*)**.
@@ -70,13 +68,10 @@ After you've prepped your ITSM tool, follow these steps to create a connection.
 
 ## Create ITSM work items from Azure alerts
 
-After you create your ITSM connection, you can use ITSMC to create work items in your ITSM tool based on Azure alerts. To create the work items, you'll use the ITSM action in action groups.
-
-Action groups provide a modular and reusable way to trigger actions for your Azure alerts. You can use action groups with metric alerts, activity log alerts, and Log Analytics alerts in the Azure portal.
+After you create your ITSM connection, use the ITSM action in action groups to create work items in your ITSM tool based on Azure alerts. Action groups provide a modular and reusable way to trigger actions for your Azure alerts. You can use action groups with metric alerts, activity log alerts, and Log Analytics alerts in the Azure portal.
 
 > [!NOTE]
-> After you create the ITSM connection, you must wait 30 minutes for the sync process to finish.
-
+> Wait 30 minutes after you create the ITSM connection for the sync process to finish.
 ### Define a template
 
 Certain work item types can use templates that you define in ServiceNow. When you use templates, you can define fields that will be automatically populated by using constant values defined in ServiceNow (not values from the payload). The templates are synced with Azure. You can define which template you want to use as a part of the definition of an action group. For information about how to create templates, see the [ServiceNow documentation](https://docs.servicenow.com/en-US/bundle/tokyo-platform-administration/page/administer/form-administration/task/t_CreateATemplateUsingTheTmplForm.html).
@@ -102,35 +97,20 @@ To create an action group:
 
 1. In the **Subscription** list, select the subscription that contains your Log Analytics workspace. In the **Connection** list, select your ITSM Connector name. It will be followed by your workspace name. An example is *MyITSMConnector(MyWorkspace)*.
 
-1. Select a **Work Item** type.
+1. In the **Work Item** type field, select `Incident`.
+    > [!NOTE]
+    > As of September 2022, we are starting the 3-year process of deprecating support of using ITSM actions to send alerts and events to ServiceNow.
 
-1. In the last section of the interface for creating an ITSM action group, you can define how many work items will be created for each alert.
-
-   > [!NOTE]
-   > This section is relevant only for log search alerts. For all other alert types, you'll create one work item per alert.
+1. In the last section of the interface for creating an ITSM action group, if the alert is a log alert, you can define how many work items will be created for each alert. For all other alert types, create one work item per alert.
 
-   * **Incident** or **Alert**: If you select one of these options from the **Work Item** dropdown list, you can create individual work items for each configuration item.
+    ![Screenshot that shows the I T S M Ticket area with Incident selected as a work item.](media/itsmc-overview/itsm-action-configuration.png)
 
-     ![Screenshot that shows the I T S M Ticket area with Incident selected as a work item.](media/itsmc-overview/itsm-action-configuration.png)
-    
-     * **Create individual work items for each Configuration Item**: If you select this checkbox, every configuration item in every alert will create a new work item. Because several alerts will occur for the same affected configuration items, there will be more than one work item for each configuration item.
-
-       For example, an alert that has three configuration items will create three work items. An alert that has one configuration item will create one work item.
-        
-     * **Create individual work items for each Configuration Item**: If you clear this checkbox, ITSMC will create a single work item for each alert rule and append to it all affected configuration items. A new work item will be created if the previous one is closed.
+    If you select **Create individual work items for each Configuration Item** checkbox, every configuration item in every alert will create a new work item. Because several alerts will occur for the same affected configuration items, there will be more than one work item for each configuration item.
 
-       >[!NOTE]
-       > In this case, some of the fired alerts won't generate new work items in the ITSM tool.
+    For example, an alert that has three configuration items will create three work items. An alert that has one configuration item will create one work item.
 
-       For example, an alert that has three configuration items will create one work item. If an alert for the same alert rule as the previous example has one configuration item, that configuration item will be attached to the list of affected configuration items in the created work item. An alert for a different alert rule that has one configuration item will create one work item.
-
-   * **Event**: If you select this option in the **Work Item** dropdown list, you can create individual work items for each log entry or for each configuration item.
-    
-     ![Screenshot that shows the I T S M Ticket area with Event selected as a work item.](media/itsmc-overview/itsm-action-configuration-event.png)
+    If you clear the **Create individual work items for each Configuration Item** checkbox, ITSMC will create a single work item for each alert rule and append to it all affected configuration items. A new work item will be created if the previous one is closed. Some of the fired alerts won't generate new work items in the ITSM tool. For example, an alert that has three configuration items will create one work item. If an alert for the same alert rule as the previous example has one configuration item, that configuration item will be attached to the list of affected configuration items in the created work item. An alert for a different alert rule that has one configuration item will create one work item.
 
-     * **Create individual work items for each Log Entry (Configuration item field is not filled. Can result in large number of work items.)**: If you select this option, a work item will be created for each row in the search results of the log search alert query. The description property in the payload of the work item will contain the row from the search results.
-      
-     * **Create individual work items for each Configuration Item**: If you select this option, every configuration item in every alert will create a new work item. Each configuration item can have more than one work item in the ITSM system. This option is the same as selecting the checkbox that appears after you select **Incident** as the work item type.
 1. As a part of the action definition, you can define predefined fields that will contain constant values as a part of the payload. According to the work item type, three options can be used as a part of the payload:
     * **None**: Use a regular payload to ServiceNow without any extra predefined fields and values.
     * **Use default fields**: Use a set of fields and values that will be sent automatically as a part of the payload to ServiceNow. Those fields aren't flexible, and the values are defined in ServiceNow lists.