There are certain instances where you may see alerts in the Event Console that do not seem to resolve correctly. In some cases, these alerts may be old or aged. In these situations, it is advisable to "reset" all Alerts in the Event Console. Here are the steps top perform a full "Event Console Reset':
1) Close the Symantec Management Platform. Access the SQL DB that the Symantec Management Platform SMP reports to and run the following commands:
delete from ec_alert
delete from ec_alert_pooled
***Please note that this will delete any record of previous alerts. In actuality, these alerts will all eventually be purged based on the Event Console Purging definition. The goals here is to “reset’ or ”clear” all event from Event Console.***
2) Reset all Monitor Agent systems. This will reset all triggered rules on each monitor agent system back to a severity state of Normal. If any condition exceeds the thresholds for currently defined rules for each agent, it will then trigger and you should updated ad accurate alert data into the event console. To “reset all monitor agents”, simply run the “Reset Monitored Resource” tasks. (Under Manage > Jobs and Tasks > Monitoring and Alerting > Monitor > Tasks) You can apply the task to the specific Target or Filter that contains all of the Monitor Agents in the environment.
3) Launch the Symantec Management Platform and review the Event Console