I have a rule in LEM that alerts me when a VPN tunnel goes down and I have a 2nd rule that tells me when the VPN tunnel comes back up. I am curious how I might create a rule to only trigger if the Down event comes in and there isn't an Up event within 5 minutes of the Down event?
Any suggestions here would be much appreciated, thanks!