This is a two part question for which it seems there must be a simple answer that I am just missing because I am new to Orion...
Hi,
1- No. But only users that have the "Allow Account to Clear Events, Acknowledge Alerts and Syslogs" option set to yes can perform a such action. In General there is not feature to track user actions and then be able to audit them later.
2- Seems to be a feature request as the view does not allow this.
You should add this to the NPM Product Feature request section if it is not there already: http://thwack.com/forums/57.aspx
Thanks,
Yann
In addition to events, is there a way to unacknowledge and unclear Alerts?
No. Same as events, this would be a feature request.
Not that adv. alerts gives you who acknowledged them.
If for some reasons, there is an urgent need to Undo the action, you can edit the Acknowledge field for the events and alerts directly in the DB. Do it at your own risks.
Acknowledged/AcknowledgedBy fields in AlertStatus table.
Acknowledged field in Events table.