Hello, I have some logs from access control send to zabbix as a txt. What I am trying to accomplish is that when a specific string in log comes in [in this situation when doors are open] it fires a notification by the trigger and the Problem expression looks like this: {HOST:xxx.regexp("\[004\]")}
There can be multiple logs about door open at the same time so i would like the trigger to create a new notification for every ITEM.VALUE that contains this problem expression so if i understood everything well i have set PROBLEM event generation mode to multiple.
The recovery expression looks like this {HOST:xxx.change()}={HOST:xxx.regexp("\[502\]: Door Closed")} And this works for ANY log containging problem expression from above and unfortunately for ANY log containing regexp("\[502\]: Door Closed") - so this is how i am able to create a single trigger for every door if i match regexp with log with every door name and its auto resolve with recovery expression as above.
What i would like to do is to create multiple notifications when Problem expression looks like this: {HOST:xxx.regexp("\[004\]")} and then close them separately ONLY when a specific recovery expression containing specific regexp comes in.
I thought that tags might help me, but im not sure if i understand its purpose correctly :/ Can I even do this with only one trigger or should I create multiple triggers for every door to make it work like that ? Could you please help me with that ? I hope i have made everything clear in above text :/
Zabbix version: 3.2.11
There can be multiple logs about door open at the same time so i would like the trigger to create a new notification for every ITEM.VALUE that contains this problem expression so if i understood everything well i have set PROBLEM event generation mode to multiple.
The recovery expression looks like this {HOST:xxx.change()}={HOST:xxx.regexp("\[502\]: Door Closed")} And this works for ANY log containging problem expression from above and unfortunately for ANY log containing regexp("\[502\]: Door Closed") - so this is how i am able to create a single trigger for every door if i match regexp with log with every door name and its auto resolve with recovery expression as above.
What i would like to do is to create multiple notifications when Problem expression looks like this: {HOST:xxx.regexp("\[004\]")} and then close them separately ONLY when a specific recovery expression containing specific regexp comes in.
I thought that tags might help me, but im not sure if i understand its purpose correctly :/ Can I even do this with only one trigger or should I create multiple triggers for every door to make it work like that ? Could you please help me with that ? I hope i have made everything clear in above text :/
Zabbix version: 3.2.11