I'm trying to see if there is an easy way to acknowledge/mask and alarm after a second of getting triggered without any user interaction.
I have set an alarm in a table which when this value is true it triggers a correlation rule which sends an email with the information from that alarm. After this is done, I don't longer want the alarm to be present in the element. This notification happens quite often, and I just want to have the initial triggered of the alarm since I'm already getting the info via email.
Is there a way to clear/mask this alarm without the need of an automation script?
Hi Geovanny,
Instead of masking an alarm, is it not an option to use an information event to trigger the correlation rule?
Hope it helps.