Yup.

Technically, you are going to "close" or "clear" the old event.

The default is that any event of severity=0 (Clear) from the same device, component, event class and eventKey will automatically clear any "matching" events.

One possible option for you is that, if you want a clear-severity event to clear OTHER event classes (still with same device, component and eventKey), you can adit the Configuration properties for your clearing event and add the other Event Classes to zEventClearClasses.

If you need something that does fancier matching of "good news" events with "bad news" events then write the Python code to do your matching and then use the evt._action = "history" construct against the event you want to close.

Have a look at http://wiki.zenoss.org/Category:Transforms

for some examples.

Cheers,

Jane

Email: jane.curry@skills-1st.co.uk    Web: https://www.skills-1st.co.uk