User Macro & Reduce Trigger Alerts

[tomkap1984]

Hi all,

I am using zabbix 4.2.8 with several proxies that serves companies.
one of our customers want set new triggers on drives and set it as the follow:
1. Partion c:\ -create 2 percentage alerts one is 10% as critical and 20% set to warrning.
2. the rest of the partions are 10 GB below critical, 20 GB as warrning.

I am using windows template OS and i understand that i can set user macro values for this.
so, about it how can i relate those LLD triggers to the proxy or the host group name.
I know that i can create new template but i would prefer not to loss history if it possible.

The Other question- there tons of trigger alerts on os windows alerts and i would to reduce alerts. i found one solution on action set tags on triggers that i don't want to fire to the mails but im asking regarding trigger services that are duplicate with the names for example OneSyncSvc_1b89c4, is there a way to set it on wildcard?

Thanks,

Tom

[tim.mooney]

I am using zabbix 4.2.8 with several proxies that serves companies.
one of our customers want set new triggers on drives and set it as the follow:
1. Partion c:\ -create 2 percentage alerts one is 10% as critical and 20% set to warrning.
2. the rest of the partions are 10 GB below critical, 20 GB as warrning.

I am using windows template OS and i understand that i can set user macro values for this.
so, about it how can i relate those LLD triggers to the proxy or the host group name.
I know that i can create new template but i would prefer not to loss history if it possible.

Even if you create an addtional template with new triggers in it, you don't necessarily need to lose historical item data collected by the base windows template. As long as the Windows Template OS or whatever is collecting the items you need, you still have the historical values. One thought that occurs to me is that you could potentially create an additional template that has just triggers in it, that relies on the data collected by the Windows Template OS. You may need to link your template to the Windows Template OS template to get that to work; cross-template dependencies can sometimes be a little tricky.

Since you're using 4.2.x, the templates that shipped with your version of Zabbix are probably very different from the current templates; one of the biggest (perhaps often overlooked) changes with Zabbix 5.x was all that work that went into improving the stock templates. The newer templates are highly customizable and usually make excellent use of macros. I note that even the latest Windows Template OS have some hardcoded size values in their triggers that I think should have been macros, but they're still a big improvement over previous templates.

Overall, I think examining the templates that you are using to see what macros they make use of and then carefully reading the User Macros documentation , especially the section on "Macro Context" and the link to using context in LLD for filesystems. That may help you customize things to meet your needs.

The Other question- there tons of trigger alerts on os windows alerts and i would to reduce alerts. i found one solution on action set tags on triggers that i don't want to fire to the mails but im asking regarding trigger services that are duplicate with the names for example OneSyncSvc_1b89c4, is there a way to set it on wildcard?

Again for the modern templates, there are macros that can use a regular expression, including RE wildcard characters like . , *, etc. I don't know if the templates for your version have the same level of configurability, though.