короче, это прекрасный комментарий "You can NEVER override an Exchange 2010 alert from the alert view.... instead - you should always use health explorer against the alert, then mak your overrides against the MONITORS. Overriding the alert is not supported. If you disable an alert rule in the exchange 2010 MP - you will cause your database to fill up with SDKevents... because the correlation engine will think it hasnt been processed and create a new one over and over.... due to the fact the rule is disabled.
The Exchange 2010 MP is very funky in how it works, like no other MP.... and special understanding must be taken."