Data Received And Last > 1

[bcarpio]

So here is the situation I have.

I spin up instances in EC2 using a precreated AMI, this AMI has the zabbix agent already installed which means the node auto registeres (since we use autoregistration rules).

I have a trigger that says

{Template_Linux:proc.num[puppet].last(0)}<1

every time a new node spins up, I get an alert puppet is down, since we start puppet using our orchestration tools.

I want to get this alert once we have some data that puppet has run. So once Zabbix knows that puppet has started, then someone stops it I want an alert.

I can't seem to figure out how to get the logic to work to do this.

I have tried:

({Template_Linux:proc.num[puppet].last(0)}<1 & {Template_Linux:proc.num[puppet].prev(0)}<1)

But then when I stop puppet, I get an alert, however the next check even if puppet is down sends me an ok message.