You didnt share any useful info, so we cannot help you.

maybe tell us which events from APM (EUM Alert, CI Status change, etc) and with which event template you used (default or custom)

maybe show us the 2 events in OBM that you think one should close the other.

maybe show us the "key" and "close key pattern" of your events.

You can also submit support case for further investigation.

Asaf thanks for reply basically its a EUM alerts with custom event template we have deployed OprEvent rest policy basically critical ones are not closed even after normal event arrived in obm . below u can see we have normal alert recieved for failures. but critical event still there in event browser  

i have attached one application critical and normal event with open and close keys

Hello,

I can't see if the message keys will work, since your screen shot doesn't show the full key :-(  Please can you cut/paste the message keys as text.  

Secondly, the close key pattern needs to be wrapped with ^ and the start and $ at the end to improve message key performance.  Please see https://portal.microfocus.com/s/article/KM000023426 for more information about that.  Personally, I try to keep message keys as short as possible.  They are not there to provide more information, they are there to close events (meaning Operators don't really need to look at them).

Do other message keys work? If not, please check Infrastructure settings "Duplicate Events Suppression Settings", especially that "Enable Duplicate Events Suppression" is true and that "Detect Duplicate Events by Key" is also true.

Thanks.