Ok, here is a tricky one I can't figure out.. I have a simple rule with an ignore=7200 so it does not fire too much. BUT, what if I only want to set the ignore PER HOST? In other words, if it triggers on another host it should alert then set the ignore timer. Yeah, I am not aware of a clean/simple way to do this..
Any ideas?
