Why are Event Viewer alerts not resolved?

Overview

Event viewer items are not like other Threshold items, this is because there is no action that can indicate the event was resolved.

The Agent always reads the information from Windows events and writes them to Atera.

What's the difference?

As an example, let's say memory usage jumps above our Threshold. In this case, the alert will register on the Dashboard and once the memory is "fixed" / decreases below the Threshold – the alert will be resolved and removed from the dashboard.

In contrast, Events such as Windows backup are displayed as continuous information.

Note: Event ID and failed login attempt type alerts will not auto-resolve. 

Note: A new alert will not be generated if the event ID is triggered more than once in a 60-minute period.

Click here for more information.