Resolved events are triggered but they should be suppressed.

Question

I am monitoring incoming messages from eventhubs. Alerts should be suppressed by a processing rule. This works when the alarm is triggerd but i also get a notification when the alert is resolved, although the resolution happend in the suppression window.

IN the example, I am looking back every hour for an hour but. So the issue should be resolved around 7:30 but I get the notification at 9:59. The suppression window is until 9:00 AM.