How to handle unnecessary active alerts

For best practices, I assume the LM academy covers that (perhaps the new https://academy.logicmonitor.com/alerts-badge session).

For the network interface alerts, my understanding (I'm not on the network team) is that LM will only add ports/interfaces the first time LM sees that it has been used. So if someone temporarily uses a port, it will get added in LM, then alert when they stop using it. If that is what is happening, you have some options. You can just disable alerting for that interface instance and manually turn it on if you need to alert on it later. Or you can delete the instance in LM so it will forget it until the next time it gets used. This sounds like what you want to do, but I just see that as a wack-a-mole of random interfaces getting added and manually deleted. I myself (again not a network guy) would just let LM add all the ports and disable all but the important ports. Like those for uplinks or to servers. Don't generally need to monitor client ports.