ProfessorProfessorOn 12/22/2021 at 3:45 PM, Mosh said:Better to have it as a configurable option than to remove completely as to whether or not a LogicMonitor instance can use ack with events. We find it useful as our Ops triage every event and we have long timeouts on some of them.
Fair enough -- then LM should make this an option in the alert rule so we can suppress ACK ability and instructions for Windows events. It is really annoying to have to explain to folks why their efforts to stop the alerts are futile. What we really need is basic correlation of events into incidents, but as I said I have brought this up for years. @Stuart Weenig always says to engage CSMs, but I have (or used to until I gave up) and this one has received zero traction.
