We keep getting the followign kind of messages @ 03:00 evey day. Threshold Violation event has been cleared on ‘XYZ’. (Profile Name: ANU_2_CPU_MEM, Rule Name: Router CPU >= 80% Copy, Reason for clearing: The Event Rule that originally raised the Threshold Violation has been deleted.). Why are we getting these ?
Known bug in CAPM 3.5 - see Defect DE343511
Symptom: Event profiles with multiple rules could result in events being cleared during orphan alarm processing when they shouldn't be.
Resolution: Modified orphan alarm processing to handle event profiles with multiple sets of rules and not clear alarms when they should not be.
Upgrade to the latest 3.5 kit or 3.6