We wish to feed in email alerts from an anti-virus platform to monitor for issue.
The platform generates 1000's of email per day, most of which we have no interest in and just filtering some of these emails in OpsGenie is easy enough.
What I would like the platform to do is, receive an email advising of an issue, but sit on it for maybe 30mins.
At somepoint within that 30min window the system will more than likely receive a follow up email advising the the issue has resolve itself.
I want the platform to pick up on the follow up email and then close it's ticket if the follow up was received.
- If there was no follow up email, then forward the alert to us.
I know this is possible, as we used OpsGenie for something similar in the past; I simply ca't remember how to set this up.