Events duration. Problem?

[bobrivers]

Hi,

I was looking into Monitoring > Events, and noticed that the duration of the events aren't "ok". Or at least, I don't know how to read it...

This is how the events are being displayed:

2009.Sep.22 00:31:56 srv Server has just been restarted OK Warning 10h 19m 26s 
2009.Sep.22 00:21:59 srv Server has just been restarted PROBLEM Warning 9m 57s 

I supposed that first zabbix will register a PROBLEM event and then, when the OK occurs, zabbix should calculate the duration between this two events. But, as you can see, zabbix shows me that the duration was 10h 19m 26s

My doubt regards about the duration of the event. How should I read it?

I think that I'm reading it wrong because, the duration of the PROBLEM event seems to be ok. So, another question: based on what zabbix calculates the duration of the OK event?

I'm using zabbix 1.6.5. This "problem" occurs with all the events. The above one is just an example.

TIA,

Bob

[krimson]

The "OK" duration you see is the amount of time the event has been in that state. When you press F5 you will see the amount increase as time progresses because it is the current state.

Seems correct in my opinion

[iuic]

the way to calculate duration of event is to receive clock of event and r_eventid and after do another event request with r_event id to get clock of recovered event, then calculate [clock of r_eventid] - [first eventid clock] = duration
check first if event have r_eventid