I have a custom zabbix trapper item that triggers when a user logs in to a windows machine, reporting the name of the machine they are logging into. We are basically monitoring for users logging into machines they are not supposed to be on. So the trigger is set to alert administrators when the last machine logged into does not match the current machine logged into. I would like the notification email to contain the last 2-3 values of this item.
I tried the following message that did not work:
Machine hopping was detected by {HOST.NAME}
Last 3 logins
1. {ITEM.VALUE1}
2. {ITEM.VALUE1}.last(1)
3. {ITEM.VALUE1}.last(2)
Original event ID: {EVENT.ID}
Do I have this wrong or is there no way to display past values in email notifications?
I tried the following message that did not work:
Machine hopping was detected by {HOST.NAME}
Last 3 logins
1. {ITEM.VALUE1}
2. {ITEM.VALUE1}.last(1)
3. {ITEM.VALUE1}.last(2)
Original event ID: {EVENT.ID}
Do I have this wrong or is there no way to display past values in email notifications?