Assistance needed with icmpping triggers

[ahahum]

I am trying to get this to work, but I have not had any luck. I've tried several different expressions, but none seem to get me what I want. So, I'm resorting to asking...

I would like to be alerted when I miss 3 consecutive pings, but not be alerted that it is ok until I have 3 consecutive successful pings. The ones I have been working with work correctly when the 3 packets are missed originally, but I get alerted again when I receive 1 packet back.

Is what I'm wanting possible?

Thanks in advance!

[dmarsh]

This works for me:

{Template_Router:icmpping.max(900)}=0

I have the update interval set to 300 seconds in the Items tab.

I'll explain that a bit more. So, 1 is up and 0 is down. If the maximum number I see in 900 seconds is 0 (down) send an alert. This stops false triggers, as we drop icmp for qos.

I just re-read your question and this does not solve the "3 successful pings" part.

[Kai-Kai]

What is sure is that you can make a small shellscript doing that for you, giving the result to zabbix...

But using icmp and zabbix simply... for the first part, to have an alert only if the 3 last are bad, use :

{Template_Router:icmpping.sum(#3)}=0

(the sum of the 3 last values = 0 - I think it's better because it works even if you change the delay between checks)


As far as the second part is concerned... I think we can play with logical boolean expression... but it's a bit difficult to find a good one... I'm trying.

[Kai-Kai]

I've made a lot of combiation... but I fail... the problem is the recovery depend on the previous state of the trigger... and I think we don't have such a condition.
It would be something like that I think :
{Template_Router:icmpping.sum(#3)}=0 | (LAST_STATE=PROBLEM & {Template_Router:icmpping.sum(#3)}#3)

It would be possible to do it in the action part of the soft, because we can add more conditions... but in the trigger itself I think we can't...

I've also thought to use triggers dependencies... but it makes a trigger visible on the dashboard...

[dmarsh]

sum vs max

Thank fcge, that "sum" hint is a good one.

[Kai-Kai]

You're welcome.
I've also open a suggestion topic to talk about trigger depending on itself, it can be found at :

http://www.zabbix.com/forum/showthread.php?p=48201#post48201

If you find a solution to do exactly what you're looking for, don't hesitate to explain it here, I'm really interested in this question.

[ahahum]

Thanks for the ideas guys, I'm glad that I wasn't just missing something very apparent when trying to do this in my environment.

The sum(#3)}=0 was one of the others I had tried, but it didn't quite give me the recover message when I wanted it.

I will keep pondering and hopefully one of you Zabbix guru's will notice this little thread and figure out the logic of this for me!

Thanks!

[Kai-Kai]

I have perhaps a good news for you...

Calimero has just shown me a feature in Zabbix I haven't seen before, in another topic.

Try this :
{Template_Router:icmpping.sum(#3)}=0 | ({TRIGGER.VALUE}=1 & {Template_Router:icmpping.sum(#3)}#3)

I think it can be good...

[ahahum]

I have perhaps a good news for you...

Calimero just have shown me a feature in Zabbix I haven't seen before, in another topic.

Try this :
{Template_Router:icmpping.sum(#3)}=0 | ({TRIGGER.VALUE}=1 & {Template_Router:icmpping.sum(#3)}#3)

I think it can be good...

Nice, that's it! I tried to get something like this going from an example I saw in the documentation, but I wasn't able to get it right.

Thanks to both!

[Kai-Kai]

Really happy to have helped you.
(And really happy to have found a new feature in zabbix).

[elvar]

This is great! I really like this one for host availability checks. Thanks!

[bashman]

This also resolves my problem.

http://www.zabbix.com/forum/showthread.php?t=15113&highlight=update+items

Thanks.