i am forwarding an alert from loginsight to VROPs based on event id and then creating an incident. i have achieved that part. the issue is in VROPs alert is in active state. Can some one help to solve this problem. i need when ever my vm got rebooted a incident should cut to the team but now its not as the alerts is always active.
When you created the alert in loginsight did you tick the auto cancel option