From a device snapshot page, the Show Alarms action gives a list of the devices alarms sorted by date.  However the date / time for many alarms is not correct.  What is shown is when the alarm was CLEARED, not when it actually occurred.  Many alarms such as 'interface down' are cleared manually after reviewing, and the database should retain the original fault time.  Why does it record the time it was cleared?

 

Norbert