Auto operator "close" action triggers nuisance emails
This is general information applicable to most UIM versions.
"Expect the previous severity level to be part of the severity filter" check box was NOT enabled.
Sending of EMAIL for alarms is controlled by profiles in the NAS Auto Operator configuration. Customer had a profile where they had selected clears to be sent but did NOT set the "Expect the previous severity level to be part of the severity filter" check box as per the nas Help doc:
When an alarm with severity level 'Clear' occurs, the previous severity level of the alarm must also be a part of the matching criteria to trigger an action from the profile.
An alarm with severity level Clear occurs. Severity level Critical and Clear is selected as matching criteria, and the previous severity level of the alarm was Warning (which is not selected as matching criteria). No action will be triggered.
Same example as above, but the previous severity level of the alarm was Critical (which is selected as matching criteria).
The selected action WILL then be triggered by the profile.