Do you want to email the ServiceNow incident ticket number?
Here is one way I figured out how to do it, I wonder if anyone else has come up with something better?
Add an email action to your alert, with a 1 minute escalation delay.
Then include the following in your email message text.
An event has been detected on ${N=Alerting;M=AlertTriggerTime;F=DateTime} related to the device named ${N=SwisEntity;M=Caption}.
Event: ${N=Alerting;M=AlertMessage}
Alert Name: ${N=Alerting;M=AlertName} - ${N=SwisEntity;M=Caption}
Application/Service - ${N=SwisEntity;M=CustomProperties.Application_Service}
<br/>A ServiceNow incident has been created for this event. <a href="${SQL:SELECT IncidentUrl FROM [dbo].[SNI_AlertIncidents] WHERE AlertObjectId = ${N=Alerting;M=AlertObjectID} order by IncidentNumber DESC}
" target="_blank">${SQL:SELECT IncidentNumber FROM [dbo].[SNI_AlertIncidents] WHERE AlertObjectId = ${N=Alerting;M=AlertObjectID} order by IncidentNumber DESC}</a>
Please update this incident ticket with the investigation details and root cause analysis.
<br/>Quickly acknowledge receipt of this ServiceNow incident here <a href = "${N=Alerting;M=AcknowledgeUrl}" target="_blank">SolarWinds NOC All Alerts View</a> <br/>or acknowledge the alert with a note via the SolarWinds <a href = "${N=Alerting;M=AlertDetailsUrl}" target="_blank">Alert Details page</a>
<br/>Additional information: <a href="${N=SwisEntity;M=DetailsUrl}" target="_blank">SolarWinds summary for ${N=SwisEntity;M=Caption}</a>
IP: ${N=SwisEntity;M=IP_Address}
Device Type: ${N=SwisEntity;M=MachineType}
DNS: ${N=SwisEntity;M=DNS}
SolarWinds polling engine on server: ${N=SwisEntity;M=Engine.ServerName}
