Hi Jason,
I have the following idea. Please test and verify if this works for you. I take just one 0x0ff00111 single case. The other 0xff00116 will just need to duplicate the event configuration.
I am using Heartbeat rule, i.e.
Event1 E 50 R CA.heartbeat, Event2, Event3, 1800, Event4
Event3 E 50 A 3,Alarm3 \
R CA.EventCondition, "default", Event4
Event2 E 50 C Alarm3 \
R CA.EventCondition, "default", Event1
The heartbeat rule start with the occurrence of Event1, Event2 will be equal to 0x0ff00111. This heartbeat rule will look for Event2 and raise Event3 if Event2 doesn't happen in 1800 sec (30 min).
Event3 will raise alarm, i.e. Alarm3, and also Event4 which stops the Heartbeat rule.
When Event2 happens, it will clear Alarm3, and also raise Event1 which re-starts the Heartbeat rule.
In the beginning you need to trigger the Heartbeat rule by raising Event1 (or Event2).
I hope this helps.
Regards,
Widjaja.