Zabbix 6.4.8.
In Problems -> History I often find pages and pages of the same Resolved problem.
This is due to a Global Event Correlation rule, that immediately closes a problem generated by a log monitoring trigger, if the same problem is already active, in order to avoid duplicate alerts for the same problem.
The log is updated every 5 minutes and the "error" string is written again in the log until the problem is resolved. This means that in the History search I get a "resolved by correlation rule" event every 5 minutes, sometimes for hours or days, until the problem is fixed. This fills up the history so that it is difficult to read the other entries.
I am looking for a bright way to exclude the "resolved by correlation rule" from the history search. I know that the only way to exclude something from a search is using tabs, but I cannot figure out a way to assign a tab to this type of event (resolved by global event correlation rule).
In Problems -> History I often find pages and pages of the same Resolved problem.
This is due to a Global Event Correlation rule, that immediately closes a problem generated by a log monitoring trigger, if the same problem is already active, in order to avoid duplicate alerts for the same problem.
The log is updated every 5 minutes and the "error" string is written again in the log until the problem is resolved. This means that in the History search I get a "resolved by correlation rule" event every 5 minutes, sometimes for hours or days, until the problem is fixed. This fills up the history so that it is difficult to read the other entries.
I am looking for a bright way to exclude the "resolved by correlation rule" from the history search. I know that the only way to exclude something from a search is using tabs, but I cannot figure out a way to assign a tab to this type of event (resolved by global event correlation rule).
Comment