We currently poll every 5 minutes. We often see an application in warning or critical state that 5 minutes later is back to green. We are getting ready to set up email warnings of applications in warning or critical state but have a dilemma. Since the warning or critical states are usually resolved by the time of the next polling 5 minutes later we do not want the email sent after only 1 "incident" because of false alarms. But if we wait for 2 or 3 "incidents" we have the potential of having an application down as long as 10 or 15 minutes and having users adversly effected. Ideally if we could change the polling interval after the first incident to 1 minute then from the time when the app looked OK to when we have polled 3 times and only 7 minutes has elapsed and we know it is not a false alarm. Is this possible?