Ad Widget

Collapse

Item values in trigger name, but not in trigger expression

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • germanodlf
    Junior Member
    • Apr 2018
    • 1

    #1

    Item values in trigger name, but not in trigger expression

    I have these items:
    Name: Logon ID
    Type: Zabbix trapper
    Key: logonid
    Type of information: Character

    Name: Logon Target
    Type: Zabbix trapper
    Key: logontarget
    Type of information: Character

    Name: Logon Source
    Type: Zabbix trapper
    Key: logonsource
    Type of information: Character

    Name: Logon Account
    Type: Zabbix trapper
    Key: logonaccount
    Type of information: Character

    Data is send by a bash script using zabbix_sender. Something like this:
    zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logontarget -o 'host01'
    zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonaccount -o 'dom\user'
    zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonsource -o '10.0.0.1'
    zabbix_sender -z $SrvAddr -p $SrvPort -s $Hostname -k logonid -o '0xb2a32e13'

    Data is successfully received by all four items.

    I have this trigger:
    Name: {{HOST.HOST}:logontarget.last()}: Logon by {{HOST.HOST}:logonaccount.last()} from {{HOST.HOST}:logonsource.last()}
    Expression: {host02:logonid.diff()}=1
    OK event generation: None
    PROBLEM event generation mode: Multiple
    Allow manual close: Yes
    Enabled: Yes

    I need to see in Zabbix dashboard a problem with this description:
    host01: Logon by dom\user from 10.0.0.1

    But instead, I have seeing a description like this:
    {host02:logontarget.last()}: Logon by {host02:logonaccount.last()} from {host02:logonsource.last()}

    I must not use the items logontarget, logonaccount and logonsource in the trigger expression, even knowing that would enable me to use {ITEM.VALUE<1-9>} or {ITEM.LASTVALUE<1-9>} macros in the trigger name.

    In these circumstances, is it possible to get values from the items logontarget, logonaccount and logonsource and use them in the trigger name? Someone can help me with this problem description?

    Thank you very much in advance.
Working...