Web scenario trigger to handle N consecutive fails?

[Victor Sudakov]

Dear Colleagues,

I'm currently using a trigger from the documentation, namely: http://www.zabbix.com/documentation/...nitoring/items

{zabbix-server:web.test.error[site1].strlen()}>0 and {zabbix-server:web.test.fail[site1].last()}>0

It works quite well but I'd like to improve it so that an alarm is triggered after 3 consecutive web test fails. Could you please suggest a modification to the expression above?

[Victor Sudakov]

The smartest variant I've found so far is

{zabbix-server:web.test.fail[site1].min(#3)}>0

but this probably would require a separate recovery expression?

To cut a long story short, please someone share the trigger you use in production, with a good balance of fail detection, recovery detection and protection from false positives. TIA!