Active alerts are sent when a threshold point is passed or the status of a monitored component is problematic.
Clear alerts are sent when the problem is resolved and the component has returned to its normal value. Clear alerts look like active alerts but the severity is set to 0.
