This may be explained by the difference between alerts and object health state in SCOM.
The circle icon on a Squared Up dashboard represents a SCOM alert. You should find that if the alert is closed, it disappears from the dashboard.
The square icon on a Squared Up dashboard represents the SCOM object health state. Closing an alert does not affect the object health state. The health state is maintained independently by SCOM and is based on the status of monitors.
The confusion comes because monitors typically raise alerts - so you end up with an alert and an unhealthy object.
The square icon with a cross and a standby icon in Squared Up represents an object that is currently offline / unavailable whose last known health state was critical. The icon doesn’t represent the alerts that are currently open.
Are you talking about a “Failed to Connect to Computer” alert that comes as a result of a diagnostic task, which fires after a Heartbeat Failure?
If so - don’t surface those in SquaredUp. They can get stranded if you have a scenario where the HB failure clears before the diagnostic task (pinging the agent by name) completes. We had to change ours to only show HB failure, and have the FTC’s roll to a queue for SCOM admins to run the task to clear.
Thanks. I will try and get this clarified with screenshots as soon as I can. It’ll help everyone explain if it is normal behaviour or we are not doing something correctly
Not specific to “Failed to Connect to Computer” alert but we do see those alerts too. Is it possible you could detail how you actioned the changes so we can possibly do the same to avoid issues