Windows log triggers status change

[grejer]

I've done some triggers for nativ windows event logs. One of them looks like that: {host:eventlog[Application]. logseverity( 1 ) }=1
This trigger become true when agent find Information event in Application log. After some times (about 1h) triger change its status to false (if non of information events are logged). I can't find how long this trigger are true. It seems like there is a random time around 1h. How could I reset (automaticly) trigger status for windows event log trigger?

[bbrendon]

In addition to you eventlog trigger, add the nodata function like (very simplified)

logseverity() & nodata()

[grejer]

Triggers 'switch off time' function - nodata()

Yeah, it could be good solution.
Thanks.

[sarathyme]

In addition to you eventlog trigger, add the nodata function like (very simplified)

logseverity() & nodata()

Very good idea, thank u much. It helped me.

Thanks
Vijay