Currently the Suppression Rule acts as a permeant action. There is no way to reverse this event even when removing the rule, which makes this feature unusable.
I proposed making this a reversable rule and to use a separate dashboard to track a suppressed event instead of putting into an Incident.
Or have the even removed from the Suppressed Incident when it clears.
Thanks
Netreo Product Area | Netreo (IM) |