I want to create an escalation policy that will initiate a "clear alert" action if the Last Updated time of the alert is longer than 20 minutes. I am not seeing a way to do this based upon the Time tab options. How can I achieve this?
there is the "Modification Time" Attribute available under the Attributes Tab in the Escalation Policy Editor. You can click into one of the columnes headers in the SOI Console Alert Queue and add the "Modification Time" column to the the Alert view so you can verify if this will cover what you would like to do.
Modification Time will not work. That attribute is blank. How can I do it using Last Updated Time attribute?