So my issue arose with some syslog resetting format:
I've properly tagged the Syslog coming in as SLAsyslog and obviously tagged the reset in the same fashion.
My issue arises with clearing the alert generated off the Syslog in the first place:
I've got the logic for when the Syslog comes in, that piece alerts properly.
But I'm unable to determine how to get the Syslog to clear properly, I've included my current reset condition.
It'll clear the syslog but it'll look for the first thing tagged with the SLAsyslogreset and then it'll reset even if the device isn't the same as what triggered in the first place.
Any help would be greatly appreciated!