I will report a problem about multiple events in version 2.0.8.

One of our customers encountered that a trigger which "Multiple PROBLEM events generation" is off raised 2 events.

Look at picture1.png. 2 events were raised on events window at "2015/06/26 07:31:43". These events were generated from the same trigger which expression is

"{TP_1000_RL_R07LCP01:logrt["/app/RL/RLX/log/.*RLX001.trace",@TP_1000_RL_R07LCP01_REGEXP_0013_6278,UTF-8,,skip].regexp(.*)}=1&
{TP_1000_RL_R07LCP01:logrt["/app/RL/RLX/log/.*RLX001.trace",@TP_1000_RL_R07LCP01_REGEXP_0013_6278,UTF-8,,skip].str("ZABBIX_STATUS_CLEAR_MESSAGE")}=0"

in zbx_export_templates.xml.

Look at picture2.png. 2 same messages are logged to history at the same time. So, we can say that 2 messages were logged to the monitored log file and Zabbix agent sent these messages to Zabbix server. These 2 messsages matched to the expression of the trigger, so trigger became "PROBLEM".

This is strange; as I mentioned above, "Multiple PROBLEM events generation" of the trigger is off, so only one event should be raised.

I searched same kind of problem on this site, and found that this might happen when so many events are raised in a short period(ZBX-9432). As you can see in picture1.png, however, only a few events were raised on the customer's site, so I think that this is different form ZBX-9432.

Please let me know what you need to analyse the problem. Unfortunately, the problem isn't reproduced so far, but I will try.

Thank you.