Close an alert by an event or a user action. Closing an alert also closes any related incident that is not already resolved or closed. An alert is
closed when a closing event is sent on the same message key, or the alert is closed manually.
Before you begin
Role required: evt_mgmt_admin or evt_mgmt_operator
About this task
If an incident is opened from an alert, that alert remains open as long as the incident remains open. By default, when either
the incident or the alert is closed the other is closed as well. Do not close an alert when creating a corresponding incident. By closing an alert, any related incident that is not already resolved or closed is
closed. This default behavior can be configured by changing the value of the evt_mgmt.alert_closes_incident property.
Procedure
-
You can close an alert from the Alert form, Workspace Alerts, or the Event Management dashboard (for instances upgraded from a release before Orlando).
- To close an alert from the Alert form, navigate to . In the All Alerts list, click the required alert.
- To close an alert from Workspace, select the checkbox next to the alert in the alerts list and click the Close button. You can also select an alert and click
Close in the Details tab of the alert.
- To close an event from the Event Management dashboard, navigate to . In the Alerts panel, click the required alert.
-
In the Alert Properties view, click Close.
When you click
Close, the alert is closed without confirmation.
If the alert has any resolved or closed incidents, a work note is added to the incident indicating that the
related alert was closed.
If the alert has an open incident that is not related to any other open alerts, the incident is closed, resolved, or left alone as specified by the evt_mgmt.alert_closes_incident property.