Email Alert for Events Closed by Correlation Rule

[lahiruabeysinghe]

Hello,

I've configured Event Correlation (Global) in my Zabbix setup. It works as expected. But, when an 'old event' is resolved by correlation rule, it send out an email alert (Resolved Alert). Without checking the dashboard, by checking the email alerts only, there is no way to check if the event was actually closed by the correlation rule.

I've looked up if I could use macro to include event correlation rule in message templates. Ideal solution would be to include a macro for Recovery Message. Something like below.


---------------------------------------------------------------------------------------------------------------------------------------------------------------
Problem has been resolved at {EVENT.RECOVERY.TIME} on {EVENT.RECOVERY.DATE} by {EVENT.CORRELATION.RULE}
Problem name: {EVENT.RECOVERY.NAME}
Problem duration: {EVENT.DURATION}
Host: {HOST.NAME}
Severity: {EVENT.SEVERITY}
Original problem ID: {EVENT.ID}
{TRIGGER.URL}
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Unfortunately, it seems like there is no macro support for Event Correlation. At least, I could not find any.

It would be much appreciated, if someone can direct me to configure email alerts to notify if problem event is closed by event correlation rule.

Thank You.

[lahiruabeysinghe]

The closest I got was using {TRIGGER.EXPRESSION.EXPLAIN} in recovery message. It would show value not matching with actual threshold.

[lahiruabeysinghe]

If only there was a macro to retrieve Info. :/