Eventlog trigger email actions PROBLEM and OK

[kehall]

Zabbix is configured such that any 'High' or 'Disaster' triggers send an email out.

For something like "free space below threshold" this is fine, you get a PROBLEM email and then an OK email when the issue is resolved and the trigger is 'reset'.

However when event log monitoring, the trigger is only true when the event is currently present and immediately goes 'ok' again the minute another event comes in, this results in two emails, one PROBLEM showing the matched event, and another OK showing another irrelevent event.

Is there an easy way to just have the PROBLEM email without the OK email only for eventlog triggers, and not stop the OK emails for all the other triggers (low space, too many processes etc) ?

Thanks in advance

Keith

[untergeek]

Create separate actions with criteria for one to send a recovery message and not for others.

We have a somewhat involved setup for that same thing where some Warning level events only show up in the dashboard and others will send an email.

The trick is to use multiple actions and use criteria to separate the ones you want a recovery message from and those you don't and to check the appropriate box in each Action.

[kehall]

Interestingly neither of the actions that send emails have recovery message ticked :/

I suppose I could create a new action and new condition trigger value=PROBLEM and trigger=[eventlog trigger] but then probably have to then add trigger<>[eventlog trigger] conditions to the other actions to avoid them firing also...

Or force eventlog items into a new EventLog application and filter on that AND trigger value=problem...

[untergeek]

You are correct. That is the price we pay for the flexibility, though.

[zalex_ua]

Interestingly neither of the actions that send emails have recovery message ticked :/

Read this issue https://support.zabbix.com/browse/ZBXNEXT-452 and vote if you agree.