Require assistance

[docofchaos]

Hello here,

I search a several hours to find an issue with my log monitoring

I want to check a log file and find a string : I use to
log["/var/log/sync.log","Modify"]

it works fine, in history of zabbix server i can see this
2016-02-23 23:09:25 - 2016-02-23 20:45 Modify file to server with id xxx

little example of my regular file

2016-02-22 21:09:25 Modify file to server with id 13250
2016-02-22 21:19:15 Modify file to server with id 14505
2016-02-22 23:09:55 Delete file to server with id 12543
2016-02-22 23:13:32 Add file to server with id 17256

But my trigger has a little problem, they send me all the line who contains "modify" and can recover the severity.

When i'll test my trigger the server send 1500 mail

I'll try many expression to send a mail if the string will found.

if you have many idear i'm stuck

sorry for my bad english i'm french but i understand very well

[Firm]

Show trigger expression.

[docofchaos]

hi, this is my trigger
{Template OS Proxmox:log["/var/log/sync.log","Modify"].str()}=1

{Template OS Proxmox:log["/var/log/sync.log","Modify"].nodata(20)}=0

{Template OS Proxmox:log["/var/log/sync.log","Modify"].abstract()}=0

i used manu combinaison of them but don't work, or I have got 3 mail per occurence