can you bump up the logging on the alert manager to see what it is saying?
could there be some kind of implicit/explicit circular-dependencies at work here? Clearing an interface alert because a node is down, and a node-down alert that is being reset because an interface is down?
i.e. implicitly interface down -> unreachable -> down -> unreachable ... etc.