Delaying incident creation

Ability to apply a delay period for incident rules.

The use case is that: if the alert does not get cleared automatically for 15 minutes; it becomes and indicator of an incident.