We plan to use “previous_hard_state” attribute, that can take state values 0,1,2,3.
To check what was the last state before recovery. In recovery we will have to know / report the previous state (was it Critical, Warning …)
But what does the value “99” mean - the previous state is not defined?
For example service is OK and was never in alert state.