Forgive me if this has been answered before but the search has turned up nothing so far.
I've configured an advanced alert to alert on a set of nodes if the status is warning or down. It looks similar to this:
Trigger Alert when all of the following apply
AlertEnvironment is equal to Department
Node Name is not equal to Site 1 Core Switch
Node Name is not equal to Site 2 Core Switch
Node Name is not equal to Site 3 Core Switch
Node Name is not equal to Site 4 Core Switch
Trigger Alert when any of the following apply
Node Status is equal to Down
Node Status is equal to Warning
I have a separate alert for the core switches. When a node goes down the email is being sent to alert that the node is in Warning. Shortly after, the node's status changes to Down but a second email is not being sent that informs that the node is in a Down state. I'm assuming this is because the alert has already been triggered because of the Warning.
I originally had this set up as a basic alert which sent two emails one for warning and one for down. Recently I moved it to an advanced alert due to the features of advanced alerts but I am not seeing what logic I'm missing to get the second Down email.
Any advice is greatly appreciated.