I have started looking at configuring rules in the event policy to minimise the number of emails that are generated when a remote site goes down.
I have used the situation feature to accomplish this and it appears to work well.  See image for an example.

Rule1 is the site router.
Rule 2 is the site switch
Rule 3 are access points connected to the switch.

I am just wondering if this is the best way to overcome this problem or is there another way?

Thanks in advance for any reply posts.