Help with host Macro in a trigger prototype

[Tom Rom]

Hi,

I am completely new to Zabbix and I hope that you can help me!

Scenario: Bunch of virtual machines with Windows Server 2019 should be monitored. A few services on each machine (different combination on each one) are critical for us. They need to trigger an email when status is down. All other services should be also monitored, but it is enough if they have average severity without mail notification ( I want to leave this as it is in the standard "Windows by Zabbix agent" template).

What I have done: Zabbix agent 2" for Windows one the virtual machines, discovery and discovery actions were successfull. I have cloned the "Windows by Zabbix agent" template and under the "Windows services discovery" I have added a trigger prototype with the severity "high" that should only create triggers for services that are critical for me.

The Idea: Use a host macro to store the names of services like "Spooler|...|..." and use this host macro in the trigger prototype like this:

min(/Windows by Zabbix agent - ET Changed/service.info["{#SERVICE.NAME}",state],#3)<>0 and {$CRITICAL_SERVICES} = "{#SERVICE.NAME}"

The problem: ALL services receive an additional trigger with severity "high" instead of only those I want to specify.

The questions: What am I doing wrong? Is that a good solution or is there a better way?

Zabbix server 7.4.7, Zabbix agent 2 (both downloaded couple of days ago).

Thanks in advance,
Tom

[cyber]

Windows service discovery template uses couple of macros to identify, which services it has to discover and which ones not... you need to modify that list first (and if you keep original tempalte also, then most probably you want to change macro name there, otherwise those may clash)...

You can also look into overrides part and some to rise severity for those you want...