The contents of the source field in an alarm are usually controlled by the probe. Some probes allow you to change this behavior. I am pretty sure that most probes do not exhibit this behavior on clusters, although some certainly do. Perhaps it would help if you could be more specific about what alarms/probes you are having problems with?
I know the cdm probe does this for cluster disk alarms, but it has a
configuration setting to tell it whether to use the cluster name or
IP.
-Keith