We have a number of items that generate tickets like UPS on distorted power or an internet link dropping out that soon fix and a follow up email is received confirming. Like "ups no longer on distorted power" or "internet link up".

How can I create rules to merge with the first received email and close off automatically? There should also be some time checking say maximum of an hour to stop it closing off previous received emails somehow.