I got some great answers on my question about splitting alerts based on warning vs. critical (one to email, the other to pagers) but it has raised a new question now that I have it working. It does not seem as though the recovery of a hard state is tied into the original alert for that state. I need the recovery to follow the same logic as the warning/critical, i.e. if the recovery was for a warning send the recovery alert only to email; if the recovery alert was for a critical level issue send it to pagers.
If you have any ideas how this might get done I would really appreciate the help. I am so close…! Thanks in advance