In the Alarm Analytics Alarm details Lifecycle events, seeing the Alarm Enrichment (AE) rule applied in others it not in UI but the Alarm attributes show the details. We expect that if AE rule has been applied, it show up in every Alarm Lifecycle UI.
Fixed in 25.8.2 and later.
Life cycle events earlier were not considered in theAPM reopened scenario. Also, the severity on APM alarm alarm will come as OK and the same severity would be retained before CLOSE is ingested into alarms_all. Due to that, the severity rule won't be evaluated properly on APM closed alarm
Fix: In APM reopened scenarios considering the life cycle events to be published. ( Discarded earlier alarm_unique_id changes, status changes etc field). Now alarm_update field contains only new fields enriched. Which will allow to publish the life cycle events. Also considering the enrichment to evaluate after retaining severity and message fields retained before processing the enrichment rule.