close_alert
Close an alert (state=Closed, like the "Close" action; also acknowledges it when evt_mgmt.alert_ack_on_close is true), optionally with a work note. Refuses alerts that are already Closed. [Write]
Instructions
Close an alert (state=Closed, like the "Close" action; also acknowledges it when evt_mgmt.alert_ack_on_close is true), optionally with a work note. Refuses alerts that are already Closed. [Write]
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| work_notes | No | Optional closing note | |
| number_or_sysid | Yes | Alert number or sys_id |