All,
Since I started to use Orion I have seen this bug - but nobody could give me an answer why this is. Maybe times have changed, so I give it another go:
When I get an "interface down" on a monitored interface, the event list claims it fired an alert that said it went 'up'. And vice versa. The email that I send out shows correct status. Se attached screenshot, makes it easier to understand. The basic alert is configured to trigger when interface status is down, and reset when it's up: ${FullName} has changed status from ${Status-Previous} to ${OperStatus}
Here a switch has rebooted. Thus, the port on the upstream switch gets a link-down.
So - for whatever reason - Orion mixes up 'down' and 'up', which apparently is kind of confusing. Anybody else see this?
