Custom item-trigger issues - monitoring the state of Windows firewall

[study-it]

Hello community
I reach out to you, as I wasn't able to solve this on my own.
I created a custom item to monitor the state of the Windows Firewall, by adding this to the zabbix agent's configuration:
UserParameter= windows.firewall.status,netsh advfirewall show allprofiles state | findstr /C:"State"
The string values are then postprocessed like this, because i have hosts with both English and Spanish language

This part is working as it should. The item reports correctly the state in all hosts. I want a trigger that triggers when the state of the firewall is inactive, and the trigger stays like that until the state is again active.

The part that i still haven't managed to solve is this.

From that item, i created trigger, in reality 2 of them, neither works as it should

First trigger is constructed like this



The other one:


Well, neither trigger works. What am I doing so wrong? can anyone point me in the right direction?
Thank you in advance!

[cyber]

Trigger configs have got lost... I can only point "general direction"..

[study-it]

For some reasons, the images weren't uploaded.
First the item


Post processing of the returned values



The triggers



Other trigger


And the value mapping



What am I doing wrong here?

[study-it]

There a few solutions out there, but all are based in a script execution, and our environment has a strict policy regarding script execution.
Hence the Userparameter route

[cyber]

Trigger should be probably "find(/Windows by Zabbix agent/windows.firewall.status,,"like","INACTIVO")=1" You do not need recovery expression there. Recovery expression is additional expression that should be true after original expression is already false... having them just opposite, is useless...

One thing that may throw off everything is, that for example, if I run the same command I get 3 lines as answer (Domain Profile Settings, Private Profile Settings, Public Profile Settings) ... I am pretty sure there can a situation where some of them are ON and some OFF..