kb33: How to suspend or disable events

The Event Shutoff section in the Event Details in the Event Monitor can be used to Disable an event indefinitely, or Suspend the event for up to 24 hours. Disabled/Suspended events have the following features:

• The Disabled/Suspended status will only effect the specific EventName/Measured Object/Computer that was selected. That is, if a Service Down alert is disabled for the Syslog service on computer Windows.test.net, it will not stop Service Down alerts from being created for other services or for other computers.
• When an Event has been Disabled or Suspended, no new Events for this EventName/Measured Object/Computer combination will be generated, so no Actions or Correleated Events based on these Events will be triggered.
• Disabled/Suspended events are not visible by default. To make these events visible, click the "Disabled Events" check box in the upper right corner of the Event Monitor. The Disabled/Suspended events will have a blue icon, containing a red circle with a line through the circle. If you select the event with this icon, you will have the option to enable the event again.