Hello All,

I am trying to setup correlation rules to send emails containing tabled alarm data for Critical and Cleared (normal) severity alarms.

This is the outcome I am trying to achieve (1 email for Raised, 1 email for Cleared):

I am only able to achieve this by selecting "Immediate Evaluation":

As soon as I select "Persistent Event", the rule is not able to collect the Normal severities.

I think I've tried just about every combination of including/excluding Normal severity in the alarm filter, do/don't trigger on single events, and do/don't execute on clear and cannot find a working combination.

What is the best way to achieve the persistent event functionality while retaining the Cleared alarm emails?

Thank you in advance!