Trigger issue with dependant items and/or extra "operational data" ...
We are having a bit of a catch-22 issue related to triggers with dependant items and/or extra "operational data" ...
ISSUES:
Issue 1:
A triggers with "PROBLEM event generation mode" = "Multiple" execute for each dependent item updated, and does not scope to the initail parent item update.
Issue 2:
A trigger "operational data" cannot reference other items data that is not in the trigger expression.
OVERVIEW:
ITEMS:
a) "Parent" Item
We have created a "Parent" ITEM of type "Zabbix Agent (active)" that runs every 15 minutes
and it executes a user.parameter script to scan varoius logs for a list of keywords and then return the results in a dataset
{ "logs": { "count": "11 , "detail": "7 x (SYSTEM ERROR)\n4 x (MEMORY VIOLATION)" } }
[This is done to replace the limiting "logrt" check we currently use]
b) Dependent Items
There are then 2 Dependent Items to extract the "Count" and "Detail" values from the dataset using a JSONPath preprocessing step.
EXPECTED OUTCOME:
As each check will return a NEW response, we want to create a NEW event/problem for each check, and send a new Notification with the new detail included.
Alert Example:
Subject: Problem: Logs contains errors (11 in the last 15 minutes)
Message:
Operational data: 11 Errors
7 x (SYSTEM ERROR)
4 x (MEMORY VIOLATION)
TRIGGERS:
To ensure we get a new alert for each check preformed, the "PROBLEM event generation mode" must be set to "Multiple",
as "Single" will not create another problem until the previous one is resolved/closed.
Issue 1:
If we include ONLY the "Count" in the expression, the "Detail" can not be displayed in the "Operational Data"
Issue 2:
If we include BOTH the "Count" and the "Detail" in the expression then the Triggers fires TWICE, as each "Dependent" item is updated
14:50:47 High PROBLEM Logs contains errors (11 in the last 15 minutes)
14:50:47 High PROBLEM Logs contains errors (11 in the last 15 minutes)
14:35:46 High PROBLEM Logs contains errors (3 in the last 15 minutes)
14:35:46 High PROBLEM Logs contains errors (3 in the last 15 minutes)
Any assistance or guidance would be greatly appreciated !
Regards
Pieter.
ISSUES:
Issue 1:
A triggers with "PROBLEM event generation mode" = "Multiple" execute for each dependent item updated, and does not scope to the initail parent item update.
Issue 2:
A trigger "operational data" cannot reference other items data that is not in the trigger expression.
OVERVIEW:
ITEMS:
a) "Parent" Item
We have created a "Parent" ITEM of type "Zabbix Agent (active)" that runs every 15 minutes
and it executes a user.parameter script to scan varoius logs for a list of keywords and then return the results in a dataset
{ "logs": { "count": "11 , "detail": "7 x (SYSTEM ERROR)\n4 x (MEMORY VIOLATION)" } }
[This is done to replace the limiting "logrt" check we currently use]
b) Dependent Items
There are then 2 Dependent Items to extract the "Count" and "Detail" values from the dataset using a JSONPath preprocessing step.
EXPECTED OUTCOME:
As each check will return a NEW response, we want to create a NEW event/problem for each check, and send a new Notification with the new detail included.
Alert Example:
Subject: Problem: Logs contains errors (11 in the last 15 minutes)
Message:
Operational data: 11 Errors
7 x (SYSTEM ERROR)
4 x (MEMORY VIOLATION)
TRIGGERS:
To ensure we get a new alert for each check preformed, the "PROBLEM event generation mode" must be set to "Multiple",
as "Single" will not create another problem until the previous one is resolved/closed.
Issue 1:
If we include ONLY the "Count" in the expression, the "Detail" can not be displayed in the "Operational Data"
Issue 2:
If we include BOTH the "Count" and the "Detail" in the expression then the Triggers fires TWICE, as each "Dependent" item is updated
14:50:47 High PROBLEM Logs contains errors (11 in the last 15 minutes)
14:50:47 High PROBLEM Logs contains errors (11 in the last 15 minutes)
14:35:46 High PROBLEM Logs contains errors (3 in the last 15 minutes)
14:35:46 High PROBLEM Logs contains errors (3 in the last 15 minutes)
Any assistance or guidance would be greatly appreciated !
Regards
Pieter.