I have receivers where the shared IP is no longer associated to ETH1 on either of my receivers. When that happens all my data source are no longer being collected. I tried writing an alarm looking for in-activity but that just almost every device to start sned me an alarm. I would to know if I can use a correlation rule to do this and then create an alarm to once that threshold is reached. I am not looking for every devie but just the when the receiver itself is no longer active. Can someone provide me some assitatnace with this or give me another approach?