SPLUNK - Brake episodes with e-mail notification only. Now episode that doesn't have incident created and is not managed by any team and only have e-mail notification, will send the e-mail only when the episode is created, as this episode will not be closed after clearing alert is come, next time the alert condition is met the episode will be reopened so the e-mail will not be send. We have to modify aggregation policy so it should close this type of episodes.
It should close episodes when clearing alert comes and if this episode has only e-mail notification (no incident created, not assigned to anybody, no recovery action and doesn't have *ofr* in roche_console)
This has been done already by the fast track, no feature needs to be promoted.