Specifying the Severity Attribute

Specifying clear for the SEV attribute in an alert event report clears a previously raised alert. The alert event report identifies the alert to clear by matching the values specified for the attributes CLASS, INSTANCE, ALERTID, ALERTQUAL, and APPL used to raise the alert.

Clearing Multiple Alerts

More than one alert can be cleared by an event report if you specify the wildcard value “all” for the attribute CLASS, INSTANCE, ALERTID, or ALERTQUAL.

Changes to the Alerts Window

When an alert is cleared, it is removed from the memory of the Operations Sentinel server. The fact that it has been cleared is reflected in Operations Sentinel Console. If the alert appears in the Alerts window, it is removed.

With an Active Alert Policy

If the alert being cleared matches an action list defined in the currently active alert policy, Operations Sentinel server executes any actions in the action list that apply to clearing the alert. Any unexecuted actions that apply to raising or acknowledging the alert are canceled. Unexecuted actions may be waiting for a busy service or for a delay to expire.