I have thoroughly searched online (so I think) but cannot find a way to send an email when an alert has been resolved. For this matter I consider an alert being resolved when after it has been triggered it is no longer true, or
As an example:
Alert condition: App error log due to unreachable peer/server/client
Alert notification: Send email to network team and/or end-user
Alert check interval: 1 minute
When no more reachability error within 1 minute (or more) send an email to confirm service is restored.
I tried a couple things with event correlation but am not 100% sure it covers all scenarios and specially at avoiding false positives.
Any ideas are welcome.