I know you can add custom scripts to alerts which can then be emailed out by using this method.
http://stefanroth.net/2012/04/17/scom-2012-using-alert-customfields/
But these custom scripts add them on at the end of the alert and i needed them to be added in the middle for our trouble ticket system. It needs to see start of incident and end of incident. Thanks for your help. Example:
:START OF INCIDENT
Alert: resource exhaustion detected (check virtual memory)
Source: PTESPSQLPROD01.mtsallstream.com
Path: Not Present
Last modified by: System
Last modified time: 9/26/2014 2:58:20 PM Alert description: Event Description: Cluster resource ‘SharePointAG1_10.45.12.166′ in clustered service or application ‘SharePointAG1′ failed.
:END OF INCIDENT
lars