Created a trigger to monitor the rsnapshot log, which sends an alert about the completed copy.

How to correctly form the expression, so that the "problem" automatically ends (as an example, a notification of a reboot or a modified version)

Current trigger version:

 {Log aggregator:log[/var/log/rsnapshot.log].str(daily: completed,#20)}=1

    1 answer 1

    If you have Zabbix version 3.2 and higher, use the OK event generation in the trigger settings. Recovery expression:

     {Log aggregator:log[/var/log/rsnapshot.log].str(daily:completed,#20)}=0

    This means that the trigger goes to the state OK, if the string completed is not detected.