Zabbix Actions sending multiple actions

[chintan1]

Hello All,

I have a problem that whenever a alert is triggered in Zabbix, its sending multiple actions to the user and triggering Webhook multiple times. Approx 4k times for an alert.
Trigger is suppose to capture the regex and have problem event generation mode is multiple which is required. Urgent Help is needed.

[chintan1]

Urgent Help is needed

[cyber]

Show us the trigger config also...

Looking at problem creation times, do you have a nodata() clause there, by any chance?

[chintan1]

Hello cyber,

Yes here is the trigger expression:

[cyber]

Nodata is recalculated every 30 seconds... as you have "Problem generation" as "Multiple" then you get new event each time. If you have many traps incoming, then all of them get recalculated..

Use some other function to calculate the expression, like "bytelength" for example. It will be calculated only if new data comes in and not every 30 sec...

[chintan1]

Nodata is recalculated every 30 seconds... as you have "Problem generation" as "Multiple" then you get new event each time. If you have many traps incoming, then all of them get recalculated..

Use some other function to calculate the expression, like "bytelength" for example. It will be calculated only if new data comes in and not every 30 sec...

But it should ideally get calculated in 1hr as ,1h is passed in expression.

[cyber]

no.. it is a period that is taken into calculation, not the period between calculations.

https://www.zabbix.com/documentation/6.0/en/manual/appendix/functions/history

nodata (/host/key,sec,<mode>)
sec period should not be less than 30 seconds because the history syncer process calculates this function only every 30 seconds.

[chintan1]

no.. it is a period that is taken into calculation, not the period between calculations.

https://www.zabbix.com/documentation/6.0/en/manual/appendix/functions/history

nodata (/host/key,sec,<mode>)
sec period should not be less than 30 seconds because the history syncer process calculates this function only every 30 seconds.

I am sorry but are you trying to say the expression should be nodata(/host/key,3600)=0

[cyber]

I am sorry but are you trying to say the expression should be nodata(/host/key,3600)=0

no... 3600 or 1h ... it does not matter... that particular function is recalcualted each after 30 seconds. That 1h parameter is like a rolling time window, what is taken into calculations...

What I wanted to say (and already actually did it), is, that you shoudl use some other function for your expression... just nodata does not work as you want it...

[chintan1]

Same Trigger condition being sent to 2 webhooks. At one webhook, its sending multiple times and to another only once. Is it really a nodata problem