We have set escalation based on different rules. Today we have a Windows service stopped due to a bug in application. We don't want to remove the monitoring of this service, we have acknowledeg the alarm and in my understanding the escalation should not be sent as alarm is acknowledged that it means that we are aware with this issue.
Can you tell me if it is normally that the escalation still working once we have acknowledge the alarm. For us escalation is used to send alert if the first level didn't acknowledged the first alarm.