Hi Alexis,

I made a quick test, and indeed, it seems that there is no information event raised when there is an alarm storm. However, the alarm raised when there is an alarm storm is linked to an element with the DMA name.

So far, the only way I could trigger the correlation rule is using this element name as alarm filter.

Since multiple alarms could be linked to this element (and not necessarily related to an alarm storm), you will need to implement additional filtering in the automation script. You can receive information from the alarm that triggered the correlation rule using this method: How do I parse Correlation Alarm Info data?

With this information you could implement the necessary filter to identify the alarm storm.

For your information, you can find the enum values for an alarm here:
Structure Offload Database

Hope it helps.