So it did the same thing tonight. At 05:08:32 the alarm status in HA changed to armed away, then at 05:19:03 it switched back to disarmed. From the full log-file in HA:
2020-11-02 05:08:08 DEBUG (MainThread) [pysiaalarm.aio.sia_server] Incoming line: 95E60039"SIA-DCS"7655L0#XXX[#XXX|Nri0/RP0000]_04:08:27,11-02-2020
2020-11-02 05:08:08 DEBUG (MainThread) [pysiaalarm.base_sia_server] Parsed event: Content: #XXX|Nri0/RP0000]_04:08:27,11-02-2020, Zone: 0, Code: RP, Message: 0000, Concerns: Unused, Type: Automatic Test, Description: Automatic communication test report, Account: XXX, Receiver: None, Prefix: L0, Timestamp: 2020-11-02 04:08:27, Length: 0039, Sequence: 7655, CRC: 95E6, Calc CRC: 95E6, Message type: Automatic Test, Encrypted Content: None, Full Message: "SIA-DCS"7655L0#XXX[#XXX|Nri0/RP0000]_04:08:27,11-02-2020..
2020-11-02 05:08:32 DEBUG (MainThread) [pysiaalarm.aio.sia_server] Incoming line: 0ED40038"SIA-DCS"7656L0#XXX[#XXX|Nri1/CL502]_04:08:51,11-02-2020
2020-11-02 05:08:32 DEBUG (MainThread) [pysiaalarm.base_sia_server] Parsed event: Content: #XXX|Nri1/CL502]_04:08:51,11-02-2020, Zone: 1, Code: CL, Message: 502, Concerns: User number, Type: Closing Report, Description: System armed, normal, Account: XXX, Receiver: None, Prefix: L0, Timestamp: 2020-11-02 04:08:51, Length: 0038, Sequence: 7656, CRC: 0ED4, Calc CRC: 0ED4, Message type: Closing Report, Encrypted Content: None, Full Message: "SIA-DCS"7656L0#XXX[#XXX|Nri1/CL502]_04:08:51,11-02-2020..
Then the disarmed event:
2020-11-02 05:18:08 DEBUG (MainThread) [pysiaalarm.aio.sia_server] Incoming line: 41240039"SIA-DCS"7666L0#XXX[#XXX|Nri0/RP0000]_04:18:27,11-02-2020
2020-11-02 05:18:08 DEBUG (MainThread) [pysiaalarm.base_sia_server] Parsed event: Content: #XXX|Nri0/RP0000]_04:18:27,11-02-2020, Zone: 0, Code: RP, Message: 0000, Concerns: Unused, Type: Automatic Test, Description: Automatic communication test report, Account: XXX, Receiver: None, Prefix: L0, Timestamp: 2020-11-02 04:18:27, Length: 0039, Sequence: 7666, CRC: 4124, Calc CRC: 4124, Message type: Automatic Test, Encrypted Content: None, Full Message: "SIA-DCS"7666L0#XXX[#XXX|Nri0/RP0000]_04:18:27,11-02-2020..
2020-11-02 05:19:03 DEBUG (MainThread) [pysiaalarm.aio.sia_server] Incoming line: 072C0038"SIA-DCS"7667L0#XXX[#XXX|Nri1/OP502]_04:19:22,11-02-2020
2020-11-02 05:19:03 DEBUG (MainThread) [pysiaalarm.base_sia_server] Parsed event: Content: #XXX|Nri1/OP502]_04:19:22,11-02-2020, Zone: 1, Code: OP, Message: 502, Concerns: User number, Type: Opening Report, Description: Account was disarmed, Account: XXX, Receiver: None, Prefix: L0, Timestamp: 2020-11-02 04:19:22, Length: 0038, Sequence: 7667, CRC: 072C, Calc CRC: 072C, Message type: Opening Report, Encrypted Content: None, Full Message: "SIA-DCS"7667L0#XXX[#XXX|Nri1/OP502]_04:19:22,11-02-2020..
Any ideas why it acts like this? It does not seem to happen at a specific time since it changes from day to day… but seems to happen only during night time.