Macro Dependent Trigger

[HANDL_Eric]

Hello,

we're in the process of building some interface alert triggers for our SonicWall boxes and want to make them only active if we explicitly add a macro value of 1 specific to the interface on the host. We started by adding a problem expression monitoring interface state however right off the bat, every interface triggered and we're having a hard time understanding why.

Here is the problem expression we used:

{$IFCONTROL:"{#SNMPVALUE}"}=1 and last(/Sonicwall via SNMP/net.if.status.[{#SNMPINDEX}])=2

In troubleshooting we even went to the host object for one of the test firewalls and added a macro of {$IFCONTROL:"U0"} with the value set to 0, but the alert for that interface still didn't clear. Are we mis-understanding the scope or use of macros here?


Prototype Config:


Host Macros:

[cyber]

https://www.zabbix.com/documentation..._location_user Triggers


In a trigger configuration, user macros can be used in the following fields:

Name		yes
Operational data		yes
Expression (only in constants and function parameters; secret macros are not supported)		yes
Description		yes
URL3		yes
Tag for matching		yes
Tags2
	Tag names	yes
Tag values	yes

So ... no, you cannot use it, like you do...

[HANDL_Eric]

https://www.zabbix.com/documentation..._location_user Triggers


In a trigger configuration, user macros can be used in the following fields:

Name		yes
Operational data		yes
Expression (only in constants and function parameters; secret macros are not supported)		yes
Description		yes
URL3		yes
Tag for matching		yes
Tags2
	Tag names	yes
Tag values	yes

So ... no, you cannot use it, like you do...

Alright, as i'm personally still not great with scopes here and still in the learning phase, how would I achieve this functionality?

[cyber]

If it is a discovery based anyway, you can add overrides to discovery, so only certain triggers get added and enabled. It may not be exactly, what you need (turning something on and off on the fly), but it is kind of step in that direction...

https://www.zabbix.com/documentation/current/en/manual/discovery/low_level_discovery#override