-
Incident report
-
Resolution: Unresolved
-
Trivial
-
None
-
7.2.3
-
None
-
None
Steps to reproduce:
- Set tag at host level
- Set tag at trigger level
- Configure a media to send the event via email.
- Configure a notification message and insert the macros {EVENT.TAGS} and {EVENT.RECOVERY.TAGS}.
- Generate a problem event from that trigger
- Resolve the issue so that Zabbix automatically closes the problem.
- Generate a problem event from that trigger again.
- This time, close the problem manually.
Result:
If we check the Action Log or the message sent by email, we will see that when Zabbix automatically closes a problem, both macros {EVENT.TAGS} and {EVENT.RECOVERY.TAGS} are resolved and appear in the message.
However, if the problem is manually resolved, the macro {EVENT.RECOVERY.TAGS} is not resolved and the tags do not appear in the message.
Querying the event via API shows the same behavior:
Recovery event, automatically closed
{
"jsonrpc": "2.0",
"result": [
{
"eventid": "5075",
"source": "0",
"object": "0",
"objectid": "25354",
"clock": "1741959275",
"value": "0",
"acknowledged": "0",
"ns": "770054142",
"name": "Generic Router Multilink: Unavailable by ICMP ping - 192.168.122.237 - RG-Router02-Multilink",
"severity": "0",
"r_eventid": "0",
"c_eventid": "0",
"correlationid": "0",
"userid": "0",
"cause_eventid": "0",
"opdata": "",
"suppressed": "0",
"urls": [],
"tags": [
{
"tag": "ip",
"value": "secundario"
},
{
"tag": "notifica",
"value": "incidente"
},
{
"tag": "notifica",
"value": "sla"
},
{
"tag": "scope",
"value": "availability"
},
{
"tag": "symptom_code",
"value": "Perda de comunicação com o dispositivo"
},
{
"tag": "urgency",
"value": "4 - Alta"
},
{
"tag": "component",
"value": "health"
},
{
"tag": "component",
"value": "network"
},
{
"tag": "class",
"value": "network"
},
{
"tag": "target",
"value": "snmp"
}
]
}
],
"id": 1
}
Recovery event, generated from manual closing.
{
"jsonrpc": "2.0",
"result": [
{
"eventid": "5077",
"source": "0",
"object": "0",
"objectid": "25354",
"clock": "1741960185",
"value": "0",
"acknowledged": "0",
"ns": "560950130",
"name": "Generic Router Multilink: Unavailable by ICMP ping - 192.168.122.247 - RG-Router02-Multilink",
"severity": "0",
"r_eventid": "0",
"c_eventid": "0",
"correlationid": "0",
"userid": "1",
"cause_eventid": "0",
"opdata": "",
"suppressed": "0",
"urls": [],
"tags": [
{
"tag": "component",
"value": "health"
},
{
"tag": "component",
"value": "network"
},
{
"tag": "class",
"value": "network"
},
{
"tag": "target",
"value": "snmp"
}
]
}
],
"id": 1
}
Expected:
So that the macro {EVENT.RECOVERY.TAGS} shows the tags at the trigger level and the ones inherited by it.