Log monitor creating triggers for old log

[Avinasha]

Hi,

I'm having a problem with one of the zabbix log monitor that is setup to monitor the DB log. I created a template to monitor multiple DB logs at once. All except one created lot of email alerts. I had included the "SKIP" in the log monitor to ignore the old data. It worked on all others but this particular log on which there was issue with permission and when that was fixed, it suddenly sent 700 emails. Though all alerts are valid, they are all very old and the oldest alert was for an event that occurred 13 months ago.

I wanted to know what might have caused this flooding.
Item::
logrt["/oracle/log/alert_DB1.log",,"UTF-8",30,skip]

Trigger::
{server8:logrt["/oracle/log/alert_DB1.log",,"UTF-8",30,skip].regexp(ORA-)}=1 and {server8:logrt["/oracle/log/alert_DB1.log",,"UTF-8",30,skip].regexp(02051)}=0


The above setup is identical in other item/trigger set as well. But this one caused the flood. Can you assist me.

Using Zabbix 3.2.11

Thank you in Advance,
Avinasha

[Radboud]

did you restart the agent after the permissions were corrected?

[Avinasha]

Thank you for your reply. I didn't restart agent. Only permissions were changed.