There are many situations where central raises more than one alert to a specific topic. Examples:
- Firmware upgrade (Connection lost, Gateway up, Firewall upgrade completed)
- VPN/RED connection lost (Connection lost, Connection reestablisht)
I would like to change the behavior of how alerts work in central. From my perspective it would be better, if an alert is archived, when the initial incident is resolved. In an example for VPN/RED alerts this would mean: An alert is raised, if any RED disconnects from the XG (current behavior). When the RED is reconnected, central should close the initial alert with an information "connection is up again".
With this behavior, we do not need to spend time resolving "already solved" alerts. The biggest advantage with the current implementation is the detection of recurring problems. However, this could just as well be mapped via an archive with old alarms. This would make the dashboard much tidier, however, and acute faults would be detected much better.