[bmfmancini]

Traditional Syslog alerts currently combine all matches from a polling batch into one Alarm Manager occurrence. Submit each match separately so every event has its own hostname, details, count, and stable identity across retries and batch boundaries. Threshold alerts retain their grouped raise/recovery behavior, and any failed submission preserves the existing Syslog notification fallback.

Validation:

• Full Pest security and unit suite: 540 tests passed, 2,432 assertions, using an isolated Cacti fixture and locked Pest harness.
• Changed-line coverage: 100% (6/6 executable lines) against develop.
• Alarm Manager forwarding regression: 55 checks passed.
• PHP lint and git diff whitespace checks passed.

The runtime adapter was deployed to the requested server and passed all 55 forwarding regression checks there. Fresh provider notification delivery has not been verified. Partial batch acceptance can still trigger the existing aggregate email fallback for the batch.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud