Hello,

I would like to show the following scenario as a series of alerts in RM. I have three events to send into RM:

1. CPU usage of a host has breached warning threshold
2. CPU usage of the same host has breached critical threshold
3. CPU usage of the same host is back to normal levels

Instead of showing these three alerts separately in a sequence in the alert console I would like for alert 2 to raise the severity of the first event and event 3 to close the event.

I have played with the Discriminator field to see if I can achieve the result but I guess this field is only for de-duplication.

Please advise.