We detected the following situation in customer environment and were able to reproduce it as follows:
I have modeled my PC as SysEdge device in my test environment.
In the next step I stopped the SysEdge agent on my PC and shutdown the primary SpectroServer.
Then I cleared the alert on the model on the secondary SS and recreated the alert by starting / stopping the agent.
Following that I started the primary SpectroServer again and noticed the same behavior, as I described in my initial description.
That means, the alert, that was still present on the model (alert from sec SS) had a cleared timestamp.
Release : All
Component : Spectrum Core / SpectroSERVER
This is working as designed.
In future releases, we will try to improve this behavior.