Windows event log weirdness

[gregecslo]

Hi all!

I`ve created item to read windows event log and also to clear trigger.

Here is my trigger expression:

{Template OS Windows:eventlog[Application,,"Warning|Error|Critical",@notevents,@ notevents,,skip].logseverity()}>0 and {Template OS Windows:eventlog[Application,,"Warning|Error|Critical",@notevents,@ notevents,,skip].nodata(30s)}=0

Funny thing is, that I now get 2 mails of same event instead of one

If I remove the NODATA expression, I get only one mail which is correct, but then trigger stays in PROBLEM mode forever....

Any ideas?

Thanks!