Two metric alarms represent related symptoms. Operations wants one notification only when both are in ALARM, while retaining individual alarm evaluation. Which feature fits?

1. A dashboard annotation with no alarm logic.
2. A composite alarm with an AND expression and the notification action on the composite.
3. A fixed schedule that sends an alert every minute regardless of state.
4. An OR expression and independent notifications on every underlying alarm.