Unable to recover trigger with ITEM.VALUE but same expression with string works

[JDLF]

Hi,

I have two snmp trap items, one about an incident and one about a recovery:



These traps have details which indicates the involved interface (ex: "2 0 (UA)").

We use a regex pre-treatment to keep only the interface information for the item value.

In the screenshot, we are tying to automaticaly close the trigger fired in phase 1 according to the value collected in phase 3 (the same for trigger fired in phase 2 according to the vallue collected in phase 4).

Here is our trigger for an incident:

{[ITEM 1].strlen()}>1 and {[ITEM 1].nodata(1s)}=0

I tried to give to this trigger the following recovery expression (unsuccesfully):

{[ITEM 2].nodata(1s)}=0 and {[ITEM 2].str({ITEM.VALUE)}=1 (I tried ITEM.VALUE, ITEM.VALUE1, ITEM.LASTVALUE, ITEM.LASTVALUE1...)

It seems that I can't use these macros in the recovery expression.

When I put a string in it, it works, ex:

{[ITEM 2].nodata(1s)}=0 and {[ITEM 2]. str("2 2 (UA)")}=1


I would really appreciated if you had any clue to resolve this use case



Thanks in advance for your help

[JDLF]

I succeded by configuring the trigger and using event correlation like this :



"Loc" is a tag composed of the value of the item

Thank you for your reply