Hi,
I've got an action defined that alerts when trigger is ON.
After 30 minutes, unless event is acknowledged, notifications are repeated every 15 minutes.
What happens is that if you trigger an alert (lets say you shutdown a server for some long maintenance or because server is no longer to be used), first notification is sent. Then you disable said host and expect notifications and everything else to be disabled.
The "Problem" event created because of the shutdown actually vanishes from Events screen.... but escalation is still processed and extra notifications are sent

I had to re-enable host, acknowledge event, disable host again so that escalation would stop.
Must be some WHERE clause in one of the escalation queries.
I've got an action defined that alerts when trigger is ON.
After 30 minutes, unless event is acknowledged, notifications are repeated every 15 minutes.
What happens is that if you trigger an alert (lets say you shutdown a server for some long maintenance or because server is no longer to be used), first notification is sent. Then you disable said host and expect notifications and everything else to be disabled.
The "Problem" event created because of the shutdown actually vanishes from Events screen.... but escalation is still processed and extra notifications are sent

I had to re-enable host, acknowledge event, disable host again so that escalation would stop.
Must be some WHERE clause in one of the escalation queries.