the trigger function

({logrt[...].nodata(30)}=0 and {TRIGGER.VALUE}=0) or ({logrt[...].nodata(300)}=0 and {TRIGGER.VALUE}=1)

sends alerts on every log entry. It's supposed that it won't alert when it receives data in last 300 secs and trigger status is problem.