Zabbix Trigger-Action Problem

[flyingfox]

Hi,

I'm using Zabbix to monitor some OSPF flapping within my routers. Currently i'm using this trigger to make action (send email).
Trigger (namedVlan847) :
({TRIGGER.VALUE}=0&{KXJ-PE-01:syslog[].regexp("1/0/3.30847")})
Action Condition:
Maintenance status not in "maintenance"
Trigger name like "Vlan847"

If this action condition met, Zabbix will send email to teams.

So if Zabbix received this message:
25 17:58:46.740 GMT: %OSPF-5-ADJCHG: Process 847, Nbr 10.92.214.193 on GigabitEthernet1/0/3.30847 from FULL to DOWN, Neighbor Down: Dead timer expired
or
25 18:28:15.033 GMT: %OSPF-5-ADJCHG: Process 847, Nbr 10.92.214.193 on GigabitEthernet1/0/3.30847 from LOADING to FULL, Loading Done

Then Zabbix will send email.
But other unexpected action happened, when Zabbix received these trigger:
25 18:28:15.033 GMT: %OSPF-5-ADJCHG: Process 847, Nbr 10.92.214.193 on GigabitEthernet1/0/3.30847 from LOADING to FULL, Loading Done => correctly send email
25 18:09:39.038 GMT: %OSPF-5-ADJCHG: Process 1, Nbr 10.255.10.107 on GigabitEthernet1/0/19 from FULL to DOWN, Neighbor Down: Dead timer expired => send email, an unexpected action
18:28:15.033 GMT: %OSPF-5-ADJCHG: Process 847, Nbr 10.92.214.193 on GigabitEthernet1/0/3.30847 from LOADING to FULL, Loading Done => correctly send email
18:37:14.602 GMT: %PARSER-5-CFGLOG_LOGGEDCMD: User:noc logged command:default interface GigabitEthernet1/0/9.5070 => send email, an unexpected action

Those 4 messages received in sequential

[Pada]

I don't know that much about regular expressions in Zabbix...

You can try to escape the forward slashes and dot with a backslash.
eg.

{TRIGGER.VALUE}=0&{KXJ-PE-01:syslog[].regexp("1\/0\/3\.30847")}

Otherwise, if you are reusing the same regular expression in multiple triggers/hosts OR have complex regular expressions,
THEN I'd suggest that you make use of the Global regular expressions page in Zabbix that provides testing too.
Read more here: https://www.zabbix.com/documentation...ar_expressions