Auto close of cacti notifications

[jbaptiste]

Hi,

We have configured our cacti install to send emails to an email address that is monitored by our OTRS. Every time an alert triggers cacti sends an email, and when the alert is cleared it sends another email. The first email has a subject like this one:

Host Error : companyhost (xxx.xxx.xxx.xxx) is DOWN

And when the alert is cleared it looks like this

Host Notice : companyhost (xxx.xxx.xxx.xxx) returned from DOWN state

I'm trying to figure out how to auto close the ticket created with the first email, when the second one arrives, but I always end up with two tickets being created. This is what I'm doing on the postmaster filters:

header: X-Mailer value: Cacti-Thold-v0.4
header: Subject: value: returned from DOWN state

action:
set header: X-OTRS-state value: closed successful (with this the email seems to be ignored)
set header: X-OTRS-FollowupState value: closed successful (with this a new ticket is created)

What I'm missing ?

Thanks