Initiate a workflow to validate the alarm, ping and traceroute to the device, identify weather the device’s gateway is reachable, if it was a transient alert, back-off and try again (either upon alarm clearing or wait for a fixed interval – whichever is easier to implement). Inform Ops on slack?