Event viewer items are not like other Threshold items, this is because there is no action that can indicate the event was resolved.
The Agent always reads the information from Windows events and writes them to Atera.
What's the difference?
As an example, let's say memory usage jumps above our Threshold. In this case, the alert will register on the Dashboard and once the memory is "fixed" / decreases below the Threshold – the alert will be resolved and removed from the dashboard.
In contrast, Events such as Windows backup are displayed as continuous information.
Note: Event ID type alerts auto-resolve in one week (unless 'resolved' by the MSP earlier).
Click here for more information.