Delay trigger alert for Windows Services

[Amaniel]

Current issue - Windows servers get restarted as part of testing, the services not running triggers an alert and this ends up being a false positive
Goal - Allowing testers to restart Windows services and delay the trigger alert by X mins

Zabbix Server - Zabbix 7.0.0alpha8
Current setup
- Template - Windows by Zabbix agent
- Trigger actions - using tags and default settings

Changes attempted
- Changing the state of service trigger prototype expression (from min(/CUSTOM - Windows by Zabbix agent/service.info["{#SERVICE.NAME}",state],3)<>0 to last(/CUSTOM - Windows by Zabbix agent/service.info["{#SERVICE.NAME}",state],3)<5m)
- Changing the update interval of item prototype (from 1m to 5m)

I'd appreciate any help. Attached are screenshots of the trigger settings.

[cyber]

All those action configs on pics do not matter...

Are you sure that there was
min(/CUSTOM - Windows by Zabbix agent/service.info["{#SERVICE.NAME}",state],3)<>0 (min value during 3 sec)
and not
min(/CUSTOM - Windows by Zabbix agent/service.info["{#SERVICE.NAME}",state],#3)<>0 (min value during 3 checks) This would be the one you actually need...

last(/host/item,3) does not mean "last 3 values". It means "3rd value from last".. besides it should be #3 when using last()... "last (/host/key,<#num<:time shift>>) " <- see, only #...

[Amaniel]

Thanks for the advice. I'll do further testing.

[Amaniel]

Been busy and haven't been able to test until now.

Lets say I wanted the services to be not running for 5 minutes before sending an alert. What custom expression should I be using?