Is there a way to use something opposite of nodata() in a trigger?
For example:
({ssh.available}=0 & {agent.ping}.receivingdata(300)=1)
To trigger an alarm if SSH is down but the server is still receiving data for agent.ping within the last 300 seconds?
For example:
({ssh.available}=0 & {agent.ping}.receivingdata(300)=1)
To trigger an alarm if SSH is down but the server is still receiving data for agent.ping within the last 300 seconds?