Nobody questions crew actions.
If the issue cannot be replicated and the cause is undetermined, would you agree something (and more) has to be done other than "continue to monitor"?
Here is similar incident involving zs-sjd from 2 years ago. The cause was also undetermined, however the report provides more details.
https://www.google.com/url?sa=t&sour...eVAEYjTLa31cnc