Steven Carlson wrote:
In your latter scenario, if a device goes down at 4 AM the alert will fire and be active but he won't get any email at all (even when 6 AM rolls around). At 6 AM, the alert is already active for the node so it shouldn't send the email.
That is not correct. I tested both method and what I've written is what occurred. He will get an email, I did.