The addition of a monitor condition which triggers an alert by comparing criteria of instances of other alerts already (previously) generated or by a count of active alerts against a specific device, etc. would be quite useful.
For example, a graduated alert escalation process could be created such that single instances of a triggered monitor condition produce alerts of a ‘low’ or ‘normal’ priority and no ticket while 5 or more instances of this alert within a specified period or which are still ‘active’ would create an alert of ‘high’ priority and auto-generate a service desk ticket.