I would like to send notifications to my LiveOps team for the host group "DEPT_LiveOps". In this host group there are some servers with Windows eventlog templates attached where I don't want to receive notifications for.
I created following action (you can see it on the attached screenshot "zabbix_action" as well):

Maintenance status not in maintenance
Template <> tmpl_OS-WinEventlog-ISO
Template <> tmpl_OS-WinEventlog
Trigger value = PROBLEM
Host group = DEPT_LiveOps

The action works well but sometimes triggers in the excluded templates were send to the group LiveOps. You can have a look at the zabbix_events screenshot. I have another action which sends notifications for the excluded templates to another user thats why you can see one escalation notification at the PROBLEM trigger. But you can see in the screenshot that suddenly one escalation was sent to more than one
recipient, these are the users in my LiveOps group. For me it looks like a bug. The problem appears, sometimes, once a day and as you can see in the screenshot the check triggers really often.

I opened a bug report for version zabbix version 3.0.1 some time ago, there was the same problem that the action condition calculation failed:
https://support.zabbix.com/browse/ZBX-10633

Furthermore I have the same action for another team with a different host group in it. In this host group there are the same problem servers with the excluded templates attached and I have the same problem with exactly the same escalation at 2016-11-10 06:30:01 and 2016-11-10 06:31:00.

Can you please have a look at the code which is responsible for the action expression calculation? For me it looks that it is not perfectly fixed.