Rule for after alert

Hello,

I want to add a rule for equipment which were recently unreachable but are reachable now.
My objective is that it stay orange (instead of green) for 1 hour when an equipment goes from down to up.
image

It works with this rule when it’s due to a reboot but I would like to have the same thing for others reasons.
image

For example, a rule that can see the recovery message and let it warning for one hour.

I tried few things but I think I don’t use the right thing to read logs.

Thanks and have a nice day !

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.