Trigger changing severity after x minutes

[uuwatti]

Hello dear forum,

I need to modify a trigger so that it will change alert status from Warning to Average after condition (IP address 0.0.0.0) has been active more than 30 minutes.
Polling interval for mobile IP status is 5min and mobile device will return it's IP address as string like 1.2.3.4

My current working trigger for level Warning is:
{Template test:mobileIPAddress.str(0.0.0.0)}=1

I've tried following to 'escalate' trigger status from Warning to Average by adding another Trigger:
{Template test:mobileIPAddress.count(#7,"0.0.0.0",eq)}=1

For some reason this will affect immediately, not after 30-35min.

Please advice how to create another trigger that will be effective only after 30min?

Thanks,

[kaspars.mednis]

Hi,

your expression

{Template test:mobileIPAddress.count(#7,"0.0.0.0",eq)}=1

means number of 7 last values matching 0.0.0.0
if in your period of values is found exactly one value "0.0.0.0" = trigger fires !!!

count (sec|#num,<pattern>,<operator>,<time_shift>)
Number of values within the defined evaluation period.

maybe try counting 7 last values = 0.0.0.0 ?

{Template test:mobileIPAddress.count(#7,"0.0.0.0",eq)}=7

BTW, you can make the warning trigger dependant from Average trigger, to display only the most actual one

Regards,
Kaspars

[uuwatti]

Thank you Kaspars, this did the trick!