Suggest a tweak to the incident management rule logic to allow multiple steps for one action, for example: send a webhook and then suppress an alert so the incident goes away but has been despatched to another system before disappearing from Netre...