Getting the definition of trigger zabbix
The concept of the trigger
The trigger is defined: defining a particular item of a reasonable range or a non-collected state data is reasonable. Usually a logical expression.
Logical expression (threshold): Commonly used to define the reasonable interval data, the following results:
the OK (matches): normal state -> zabbix older version, which is TRUE;
PROBLEM (ineligible): no normal state -> zabbix older version, it is FALSE;
general, assessing whether the data acquired in a reasonable range is more secure manner - according to the result of determination of the average of the last N times; N times that usually has two definitions ways:
the average value of 1. the results of the last N minutes
2. latest N times the average of the results obtained
Trigger expression
The basic trigger expression format shown below
{<server>:<key>.<function>(<parameter>)}<operator><constant>
server：主机名称
key：主机上关系的相应的监控项的key；
function：评估采集到的数据是否在合理范围内时所使用的函数，其评估过程可以根据采取的数据，当前时间及其他因素进行；
目前，触发器所支持的函数有avg、count、change、date、dayofweek、delta、diff、iregexp、last、max、min、nodata、now、sum等
更多请查阅官网：https://www.zabbix.com/documentation/4.0/zh/manual/appendix/triggers/functions
parameter：函数参数；大多数数值函数可以接受秒数为其参数，而如果在数值参数之前使用“#“作为前缀，则表示为最近几次的取值，如sum(300)表示300秒内所有取值之和，而sum(#10)则表示最近10次取值之和；
此外avg、count、last、min和max还支持使用第二个参数，用于完成时间限定；例如。max(1h.7d)将返回一周之前的最大值；The definition of a trigger
First select a monitoring item, I am here to simply create a monitored item, cpu monitoring device interrupts.
We can see that the maximum value of 134, an average of 66.55, the observation pattern, the value of trigger flip-flop 110 is set, the device is greater than the number of interruptions 110 equal to trigger an alarm.
Add Trigger
{Zabbix-agent: system.cpu.intr.last ()}> = 110 This meaning is: the most recent values of keys system.cpu.intr host zabbix-agent which is not less than 110.
It can be seen plotted out a multi yellow dotted line, this is the data cordon FIG once or higher than this dotted line, an alarm is triggered.
After the trigger is fired, zabbix dashboard will show this warning, if provided with a trigger action, then this will trigger some action, such as: remote command or mail / micro-channel / nails and other alarms.
