Check_Mk Event Console

Hi,

I managed to structure the regex in Text to match correctly:
alarmId.0:\s(\d+),\s.*alarmText.0:\s(.+?),\s.alarmState.0:\s(.),\s.componentName.0:\s(.),

The result is:
168280887 Loss of OAM contact to the CTA ‘sf-is02.pcrf.test.test’. Set OAMConnection

In text to cancel I tried with - Cleared, ‘Cleared’ - according to the documentation, using this approach should cancel all events which host names are equal.

I also tried with:
alarmId.0:\s(\d+),\s.*componentName.0:\s(.+?),\s.*alarmState.0:\s’Cleared’$

Thanks