Zabbix generates multiple events in dashboard based on 1 trigger and snmp log

[renss78]

I want to catch snmp trap events about sslcertexpiry with different severity's.

For example:

between(last(/datacenter_netscaler_adc/snmptrap[@NetscalerSslcertExpiry.sslcertValidy]),21,30)=1 --> Informational
between(last(/datacenter_netscaler_adc/snmptrap[@NetscalerSslcertExpiry.sslcertValidy]),1,2)=1 --> High

I have the following configuration:

Item- sslcertExpiry

Global Regular expression

(sslCertKeyName).*?.*(["].*?["])[\r\n].*?(sslDaysToExpire).*?.*([0-9]?[0-9])[\r\n].*?(sysIpAddress).*?(\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b)

Dependent Item - sslcertValidy - (type --> Numeric, because I want to evaluate the expiry date).


Preprocessing

sslDaysToExpire.*=\ (.*) \1

Dependent Item (type --> text, I need the certificate name for the correct eventname in dashboard).

Preprocessing

​sslCertKeyName.*\ \"(.*)\" \1

Trigger (one example, ofcourse I need several triggers for the different severity's):