Trigger expression after 2min or 5 values

[TomWuyts]

I have this problem expression in my trigger. The problem is that I have falso positives, I get often an alarm but the connection isn't down.
How can I adjust the trigger to only sent an alarm if the connection is down for longer than 2 minutes? Or last 5 values?

{$SDWAN.MEMBER.IF.CONTROL:"{#NAME}"}=1 and last(/FortiGate by HTTP-FGT600E/fgate.sdwan_member.link_status[{#ID}])=1 and (last(/FortiGate by HTTP-FGT600E/fgate.sdwan_member.link_status[{#ID}],#1)<>last(/FortiGate by HTTP-FGT600E/fgate.sdwan_member.link_status[{#ID}],#2))

[cyber]

1 is down and 0 is up?
so instead of "last" you should evaluate over time, using functions like max/min

min(/FortiGate by HTTP-FGT600E/fgate.sdwan_member.link_status[{#ID}],#5)>0

Minimum value during last 5 checks is higher than 0. essentially meaning all 5 values are not 0

min(/FortiGate by HTTP-FGT600E/fgate.sdwan_member.link_status[{#ID}],2m)>0

Similar, but evaluation is time based, 2 minutes.

I guess both of them make the last part (last value not equal to next to last) not needed any more...