There isn't a way within the conventions of the Advanced Alerts to create alerts based on incoming messages such as Syslog or SNMP Traps, however you can manage trigger actions for those events using the Syslog Viewer or the SNMP Trap Viewer. For Syslog, configure trigger conditions in the Syslog Viewer on the Orion server. You will need to configure a unique alert for trigger conditions, and for reset conditions.
I am aware of that.
Which is why I post in feature request thread.
We already use the syslog alert action to send email notification.
Both to trigger and reset condition.
But in flapping event, you will easily miss track the status.
If it shown in Alert window, we will know for sure if the event is still happen or not.