Yeah that works for interfaces directly attached to the node itself, and I believe those are actually implicit alerts, but my concern is with upstream nodes. For example, SwitchA int0/1 is connected to Node1. If I unplug (or administratively shut down) SwitchA int0/1 then NPM will create an event for the interface being down and the node being down.
What I am trying to do is to filter out extraneous alerts and get the network team closer to the actual source of the event. A node and an interface going down at the same time sends mixed messages as to the source of the problem unless you understand how alerting in Solarwinds works.
Unless there is something I am missing I am going to have to set up some sort of dependency for every interface or build some extra steps into my triage documentation.
Thanks for the suggestion though.
