I have the following log check item and a recovery expression based on it:

the log check trigger:

{app1:log[/usr/local/tomcat/apache-tomcat-8.0.36/logs/catalina.out,"Exception",,,,].regexp(Exception)}=1

the recovery expression:

{app1:log[/usr/local/tomcat/apache-tomcat-8.0.36/logs/catalina.out,"Exception",,,,].nodata(100)}=1

------------------

The trigger works fine, but after it was fired, it won't close(turn to OK state) based on the recovery expression.