Why thousands of user clearable alarms were cleared by the Spectrum install owner account?
CA Spectrum integrated with UIM
Check the spectrumgtw.log to see if the alarms were cleared on the UIM side.
Based on the spectrumgtw.log file, the CA UIM cleared all alarm in Spectrum side through the spectrumgtw probe.
Someone logged in CA UIM side should have acknowledged the alarms.
Sep 05 2018 15:29:42,916 [twScheduler_Worker-1] DEBUG Connection - POST(ing): http://<OneClick>:<port>/spectrum/restful/eventalarm with payload object:
<?xml version="1.0" encoding="UTF-8"?><event-alarm-request xmlns="http://www.ca.com/spectrum/restful/schema/request">
<alarm-delete-list>
<alarm-delete id="5b75d98a-a721-12f9-0327-00801016c87a" uimid="5b75d98a-a721-12f9-0327-00801016c87a"/>
<alarm-delete id="5b8162ce-6852-1002-044b-00801016c87a" uimid="5b8162ce-6852-1002-044b-00801016c87a"/>
<alarm-delete id="5b8f5b2a-99a2-106f-0102-00801016c87a" uimid="5b8f5b2a-99a2-106f-0102-00801016c87a"/>
<alarm-delete id="5b807486-ee27-1352-0327-00801016c87a" uimid="5b807486-ee27-1352-0327-00801016c87a"/>
<alarm-delete id="5b81d4e6-2e85-1005-0102-00801016c87a" uimid="5b81d4e6-2e85-1005-0102-00801016c87a"/>
<alarm-delete id="5b8d405a-8196-105d-0102-00801016c87a" uimid="5b8d405a-8196-105d-0102-00801016c87a"/>
.
.
.
<alarm-delete id="5aac3871-2cb9-1008-0143-00801016c87a" uimid="5aac3871-2cb9-1008-0143-00801016c87a"/>
<alarm-delete id="5b8d6c96-7b56-105f-0102-00801016c87a" uimid="5b8d6c96-7b56-105f-0102-00801016c87a"/>
</alarm-delete-list>
</event-alarm-request>