Hey everyone, first post here!
To premise the question, I have an alert configured to send an email to my team when a network node goes down and when that node recovers. Within the alert, I configured a level 2 escalation to send another email alert to our help desk after 15 minutes so that we also get a ticket for the downed node if it has not recovered within the 15 minutes.
Today, we had a node go down and recover 4 times within a time span of a few hours. So, we did receive 4 new tickets for the exact same issue; that downed node.
I'm wondering if there is any way to prevent the level 2 escalation email alert from being sent to our help desk over and over again after that initial alert was sent so that we don't get multiple tickets for the same problem.