Disable trigger

[akbar415]

I have this item

Type: Active agent
Key: logrt["/home/oracle/cron/log/oracle01_SYSTEMX.log_[0-9][0-9]-[0-9][0-9]-[0-9][0-9][0-9][0-9]-[0-9][0-9]:[0-9][0-9]","ERROR",,,,1]
Type of information: Log
Log time format: dd-MM-yyyy-hh:mm

And this Trigger

{jobserver:logrt["/home/oracle/cron/log/oracle01_SYSTEMX.log.log_[0-9][0-9]-[0-9][0-9]-[0-9][0-9][0-9][0-9]-[0-9][0-9]:[0-9][0-9]","ERROR",,,,1].last()}=1

I had a true alert with this trigger few days ago, but now the problem was solved and the log file no longer has the "ERROR" message. How can I configure the Trigger to disable the alert?

[zabx_ks]

Hi akbar415,

You should use hysteresis in this case.
See documentation:

https://www.zabbix.com/documentation/3.0/manual/config/triggers/expression#hysteresis

To fire trigger use "ERROR" and to recover trigger use some other string from your log file example "STARTED" or whatever you have in log.

Do some tests with hysteresis

zabx_ks