It could be that the alarm generated has cleared and the event rolled over in the local log. Do you have a syslog server that can see events further back from the switch?
This does imply that a reboot of the switch is required to clear the amber alarm. But that does seem a bit extreme.