This article explains the issue wherein the same alarm creates 3 different kinds of notifications and hence emails - for example, for the same alarm, CRITICAL, MAJOR and MINOR alarms are created for the same time.

CRITICAL/MAJOR/MINOR notifications occur at the same time for the same alarm.

Stream "Test Agent" Severity "Raised at" Information

Path Trace hostname1 CRITICAL 2025-11-2 06:15:17 1 stream with critical severity.

Path Trace hostname1 CRITICAL 2025-11-2 06:15:17 1 stream with major severity.

Path Trace hostname1 CRITICAL 2025-11-2 06:15:17 1 stream with minor severity.

The email receipt times are as follows.

Path Trace hostname1 CRITICAL 2025-10-24 06:15:17 1 stream with critical severity.

#Email Received: 2025-11-2 06:16

Path Trace hostname1 CRITICAL 2025-10-24 06:15:17 1 stream with major severity.

#Email Received: 2025-11-2 06:19

Path Trace hostname1 CRITICAL 2025-10-24 06:15:17 1 stream with minor severity.

#Email Received: 2025-11-2 06:20

This will happen if you have created 3 different monitors for the same alarm. If you have created CRITICAL, MAJOR and MINOR monitors for the same alarm, then when the threshold is crossed for CRITICAL, streams for all three will be generated for the same time and for the same alarm.

To get accurate information, create one monitor per alarm so that the correct severity is hit when the threshold is crossed.