close symptom event

we have a monitoring tool, and this monitoring tool collecting events from many sources like servers

each event express the status of the source which came form it,

each event open a incident number express issue, and when the issue resolved it should close the events and close the incident

but we have an issue:

in some cases the incident got resolved but event still opened in the monitoring tool

we need to check the status of each incident (closed or opened) then if the incient is closed so you need to close the event

and if the incident is opened so you will do nothing