Receive just one notification

[ferri]

Hi everyone,

I have a new problem concerning the monitoring of my backups.
I have configured a trigger based on 3 items.

So Zabbix checks every 10 seconds (it's just an example here) these items.

Here is the expression of my trigger:
({Sauvegardes:vfs.file.regmatch[{$FICHIER},{$MOT}].last(0)}=1)
|
(({Sauvegardes:eventlog[Application,,,"NTBackup",8019].logseverity(0)}=4) & ({Sauvegardes:eventlog[Application,,,"NTBackup",8019].nodata(3600)}=0))
|
(({Sauvegardes:eventlog[Application,,,"NTBackup",8017].logseverity(0)}=4) & ({Sauvegardes:eventlog[Application,,,"NTBackup",8017].nodata(3600)}=0))

I have linked an action with this trigger in the PROBLEM state to send an email.


In this situation, I receive an email every 10 seconds (every checks). Is it possible to receive just one notification (the first) although the trigger remains in the PROBLEM state?

Thank you in advance

[hansv]

Mm, can it be that you've enabled event generation to multiple true events, in your trigger?

Cheers,
- hans

[ferri]

Here is my trigger:

[hansv]

I think that if you change Generation to Normal, it should not trigger every 10 seconds (but then it might not trigger upon a next match in the event-log). If you do want multiple events and only one notification, you may have to look at Delayed Notifications or possibly alter the trigger function so it'll only fire if the regexp was found twice every 10 minutes, for example.

Cheers,
- hans

[ferri]

Thank you very much, It's perfect. I must admit I don't understand the event generation parameter.

And while I'm at it, is there a solution to compare the date of the file (for the first item), Windows events (for the others items) and the current date instead of using the nodata function?