Zabbix action configuration for "Trigger name does not contain"

[dgreene]

I have an action that monitors several hosts groups. In our current systems, a particular alarm is being noisy to our oncall group so I'm trying to filter it out in the action for the time being.

Configuring the condition "Trigger name does not contain" and adding partial text of the trigger name I'm trying to filter out, isn't working. I'm still seeing alarms from this action being sent.

I'm using zabbix 4.0 currently.

Here's my zabbix action configuration:


The full trigger name contains:

[COLOR=#000000][FONT=-webkit-standard]Trigger: Lack of free swap space ( <10% )[/FONT][/COLOR]

Do I have something configured wrong or a bad understanding of how this condition should work? Is there some issue with this condition in zabbix 4.0?

Any help is appreciated.

[brunohl]

It seems correct, please upload a picture with your whole action and one of your whole trigger to see if something else can be happening.

[dgreene]

Attaching action screenshot:


Trigger details:

[brunohl]

I guess I found out. Look at your action confoguration. It is set to evaluate C Or D, but this clause will be true in almost all scenarios, you have to use an AND clause. C and D must be true in order to work the way you want.

[dgreene]

You're right, I think that does make sense. I was thinking in reverse. I'll give that a shot, thanks for the replies brunohl !

[dgreene]

Unfortunately there isn't a way to do this due to my action size. Using the default prebuild "Type of calculation" options, none of these fit this scenario.

And when attempting a custom expression, I get this error:

Value "{46467912} and {46467914} and ({46467915} and {46467916}) and ({46467917} or {46467919} or {46467920} or {46467921} or {46467922} or {46467923} or {46467924} or {46467925} or {46467926} or {46467927} or {46467928} or {46467929} or {46467930} or {46467931} or {46467932} or {46467933} or {46467935} or {46467936} or {46467937} or {46467938} or {46467939} or {46467940} or {46467941} or {46467942} or {46468203} or {46468228} or {46468231} or {46468463} or {46468771} or {46468772} or {46468773} or {46468774} or {46468888} or {46468908})" is too long for field "formula" - 536 characters. Allowed length is 255 characters.

Perhaps through the API, there won't be this limitation.

[brunohl]

Why don't you create a new HOST GROUP and link all these hosts to it. Then, on your action configuration you don't need to specify all these host groups, just the new one.
You can have many host groups for one host so it won't be a problem.