From 998273a0e41ac22aaf0c41435af9d3114e575a7b Mon Sep 17 00:00:00 2001
From: Ciacho <ciacho@ciacho.pl>
Date: Thu, 28 Jun 2018 15:09:20 +0200
Subject: [PATCH] Create macros to support free space triggers on FS

---
 OS Linux/OS Linux.xml | 308 ++++++++++++++++++++++++++++++------------
 1 file changed, 219 insertions(+), 89 deletions(-)

diff --git a/OS Linux/OS Linux.xml b/OS Linux/OS Linux.xml
index 6051b24..96da4b7 100644
--- a/OS Linux/OS Linux.xml	
+++ b/OS Linux/OS Linux.xml	
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <zabbix_export>
   <version>3.4</version>
-  <date>2018-06-11T11:38:28Z</date>
+  <date>2018-06-28T13:06:53Z</date>
   <groups>
     <group>
       <name>Templates</name>
@@ -191,6 +191,92 @@ Notes:&#13;
           <jmx_endpoint/>
           <master_item/>
         </item>
+        <item>
+          <name>CHK::Network port::ssh</name>
+          <type>7</type>
+          <snmp_community/>
+          <snmp_oid/>
+          <key>net.tcp.port[,{$SVC_SSH_PORT}]</key>
+          <delay>5m</delay>
+          <history>2w</history>
+          <trends>365d</trends>
+          <status>0</status>
+          <value_type>3</value_type>
+          <allowed_hosts/>
+          <units/>
+          <snmpv3_contextname/>
+          <snmpv3_securityname/>
+          <snmpv3_securitylevel>0</snmpv3_securitylevel>
+          <snmpv3_authprotocol>0</snmpv3_authprotocol>
+          <snmpv3_authpassphrase/>
+          <snmpv3_privprotocol>0</snmpv3_privprotocol>
+          <snmpv3_privpassphrase/>
+          <params/>
+          <ipmi_sensor/>
+          <authtype>0</authtype>
+          <username/>
+          <password/>
+          <publickey/>
+          <privatekey/>
+          <port/>
+          <description>Check of possible create TCP connection to SSH port (configured macros).</description>
+          <inventory_link>0</inventory_link>
+          <applications>
+            <application>
+              <name>NET</name>
+            </application>
+          </applications>
+          <valuemap>
+            <name>Service state</name>
+          </valuemap>
+          <logtimefmt/>
+          <preprocessing/>
+          <jmx_endpoint/>
+          <master_item/>
+        </item>
+        <item>
+          <name>NET::service::$1</name>
+          <type>7</type>
+          <snmp_community/>
+          <snmp_oid/>
+          <key>net.tcp.service[ssh,,{$SVC_SSH_PORT}]</key>
+          <delay>5m</delay>
+          <history>2w</history>
+          <trends>365d</trends>
+          <status>0</status>
+          <value_type>3</value_type>
+          <allowed_hosts/>
+          <units/>
+          <snmpv3_contextname/>
+          <snmpv3_securityname/>
+          <snmpv3_securitylevel>0</snmpv3_securitylevel>
+          <snmpv3_authprotocol>0</snmpv3_authprotocol>
+          <snmpv3_authpassphrase/>
+          <snmpv3_privprotocol>0</snmpv3_privprotocol>
+          <snmpv3_privpassphrase/>
+          <params/>
+          <ipmi_sensor/>
+          <authtype>0</authtype>
+          <username/>
+          <password/>
+          <publickey/>
+          <privatekey/>
+          <port/>
+          <description>Check if SSH services is running and accepted connection.</description>
+          <inventory_link>0</inventory_link>
+          <applications>
+            <application>
+              <name>NET</name>
+            </application>
+          </applications>
+          <valuemap>
+            <name>Service state</name>
+          </valuemap>
+          <logtimefmt/>
+          <preprocessing/>
+          <jmx_endpoint/>
+          <master_item/>
+        </item>
         <item>
           <name>NET::service::$1</name>
           <type>7</type>
@@ -3143,7 +3229,7 @@ Value is calculated by read number of sectors multiplied by 512.</description>
           </item_prototypes>
           <trigger_prototypes>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;15</expression>
+              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_SPACE_AVERAGE}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
@@ -3151,31 +3237,21 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>1</priority>
-              <description>FS volume free space is less than 15%.</description>
-              <type>0</type>
-              <manual_close>0</manual_close>
-              <dependencies/>
-              <tags/>
-            </trigger_prototype>
-            <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;15 and {OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&gt;10</expression>
-              <recovery_mode>0</recovery_mode>
-              <recovery_expression/>
-              <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
-              <correlation_mode>0</correlation_mode>
-              <correlation_tag/>
-              <url/>
-              <status>0</status>
-              <priority>1</priority>
-              <description>FS volume free space is between 85% and 90%.</description>
+              <priority>3</priority>
+              <description>FS volume free space is less than {$VOL_FREE_SPACE_AVERAGE}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
-              <dependencies/>
+              <dependencies>
+                <dependency>
+                  <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
+                  <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_SPACE_WARNING}</expression>
+                  <recovery_expression/>
+                </dependency>
+              </dependencies>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;=1</expression>
+              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_SPACE_AVERAGE} and {OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&gt;{$VOL_FREE_SPACE_HIGH}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
@@ -3184,14 +3260,14 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <url/>
               <status>0</status>
               <priority>3</priority>
-              <description>FS volume free space is less than 1%.</description>
+              <description>FS volume free space is between {$VOL_FREE_SPACE_HIGH}% and {$VOL_FREE_SPACE_AVERAGE}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;=5</expression>
+              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_SPACE_HIGH}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
@@ -3199,26 +3275,15 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>3</priority>
-              <description>FS volume free space is less than 5%.</description>
+              <priority>4</priority>
+              <description>FS volume free space is less than {$VOL_FREE_SPACE_HIGH}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
-              <dependencies>
-                <dependency>
-                  <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
-                  <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;15</expression>
-                  <recovery_expression/>
-                </dependency>
-                <dependency>
-                  <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
-                  <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;=10</expression>
-                  <recovery_expression/>
-                </dependency>
-              </dependencies>
+              <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;=5 and {OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&gt;1</expression>
+              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_SPACE_INFORMATION}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
@@ -3226,15 +3291,15 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>3</priority>
-              <description>FS volume free space is between 1% and 5%.</description>
+              <priority>1</priority>
+              <description>FS volume free space is &lt;={$VOL_FREE_SPACE_INFORMATION}%. Configured macros.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;=10</expression>
+              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_SPACE_INFORMATION} and {OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&gt;{$VOL_FREE_SPACE_WARNING}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
@@ -3242,21 +3307,16 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>2</priority>
-              <description>FS volume free space is less than 10%.</description>
+              <priority>1</priority>
+              <description>FS volume free space is between {$VOL_FREE_SPACE_INFORMATION}% and {$VOL_FREE_SPACE_WARNING}%.&#13;
+Both are configured macros.</description>
               <type>0</type>
               <manual_close>0</manual_close>
-              <dependencies>
-                <dependency>
-                  <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
-                  <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;15</expression>
-                  <recovery_expression/>
-                </dependency>
-              </dependencies>
+              <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;=10 and {OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&gt;5</expression>
+              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_SPACE_WARNING}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
@@ -3265,14 +3325,14 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <url/>
               <status>0</status>
               <priority>2</priority>
-              <description>FS volume free space is between 90% and 95%.</description>
+              <description>FS volume free space is less than {$VOL_FREE_SPACE_WARNING}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;=15</expression>
+              <expression>{OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_SPACE_WARNING} and {OS Linux:vfs.fs.size[{#FSNAME},pfree].last()}&gt;{$VOL_FREE_SPACE_AVERAGE}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::free {ITEM.VALUE}</name>
@@ -3280,15 +3340,15 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>1</priority>
-              <description>FS volume free space is &lt;=15%.</description>
+              <priority>2</priority>
+              <description>FS volume free space is between {$VOL_FREE_SPACE_WARNING}% and {$VOL_FREE_SPACE_AVERAGE}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;15</expression>
+              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_AVERAGE}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
@@ -3296,15 +3356,26 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>1</priority>
-              <description>FS volume inodes free space is less than 15%.</description>
+              <priority>3</priority>
+              <description>FS volume inodes free space is less than {$VOL_FREE_INODE_AVERAGE}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
-              <dependencies/>
+              <dependencies>
+                <dependency>
+                  <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
+                  <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_INFORMATION}</expression>
+                  <recovery_expression/>
+                </dependency>
+                <dependency>
+                  <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
+                  <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_WARNING}</expression>
+                  <recovery_expression/>
+                </dependency>
+              </dependencies>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;15 and {OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&gt;10</expression>
+              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_AVERAGE} and {OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&gt;{$VOL_FREE_INODE_HIGH}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
@@ -3312,15 +3383,15 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>1</priority>
-              <description>FS volume inodes free space is between 15% and 10%.</description>
+              <priority>3</priority>
+              <description>FS volume inodes free space is between {$VOL_FREE_INODE_AVERAGE}% and {$VOL_FREE_INODE_HIGH}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;=1</expression>
+              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_HIGH}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
@@ -3328,15 +3399,15 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>3</priority>
-              <description>FS volume inodes free space is less than 1%.</description>
+              <priority>4</priority>
+              <description>FS volume inodes free space is less than {$VOL_FREE_INODE_HIGH}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;=5</expression>
+              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_INFORMATION}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
@@ -3344,26 +3415,15 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>3</priority>
-              <description>FS volume inodes free space is less than 5%.</description>
+              <priority>1</priority>
+              <description>FS volume inodes free space is less than {$VOL_FREE_INODE_INFORMATION}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
-              <dependencies>
-                <dependency>
-                  <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
-                  <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;15</expression>
-                  <recovery_expression/>
-                </dependency>
-                <dependency>
-                  <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
-                  <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;=10</expression>
-                  <recovery_expression/>
-                </dependency>
-              </dependencies>
+              <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;=5 and {OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&gt;1</expression>
+              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_INFORMATION} and {OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&gt;{$VOL_FREE_INODE_WARNING}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
@@ -3371,15 +3431,15 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <correlation_tag/>
               <url/>
               <status>0</status>
-              <priority>3</priority>
-              <description>FS volume inodes free space is between 5% and 1%.</description>
+              <priority>1</priority>
+              <description>FS volume inodes free space is between {$VOL_FREE_INODE_INFORMATION}% and {$VOL_FREE_INODE_WARNING}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies/>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;=10</expression>
+              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_WARNING}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
@@ -3388,20 +3448,20 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <url/>
               <status>0</status>
               <priority>2</priority>
-              <description>FS volume inodes free space is less than 10%.</description>
+              <description>FS volume inodes free space is less than {$VOL_FREE_INODE_WARNING}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies>
                 <dependency>
                   <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
-                  <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;15</expression>
+                  <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_INFORMATION}</expression>
                   <recovery_expression/>
                 </dependency>
               </dependencies>
               <tags/>
             </trigger_prototype>
             <trigger_prototype>
-              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;=10 and {OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&gt;5</expression>
+              <expression>{OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&lt;={$VOL_FREE_INODE_WARNING} and {OS Linux:vfs.fs.inode[{#FSNAME},pfree].last()}&gt;{$VOL_FREE_INODE_AVERAGE}</expression>
               <recovery_mode>0</recovery_mode>
               <recovery_expression/>
               <name>VOL::{#FSNAME}::inodes::free {ITEM.VALUE}</name>
@@ -3410,7 +3470,7 @@ Value is calculated by read number of sectors multiplied by 512.</description>
               <url/>
               <status>0</status>
               <priority>2</priority>
-              <description>FS volume inodes free space is between 10% and 5%.</description>
+              <description>FS volume inodes free space is between {$VOL_FREE_INODE_WARNING}% and {$VOL_FREE_INODE_AVERAGE}%.</description>
               <type>0</type>
               <manual_close>0</manual_close>
               <dependencies/>
@@ -3561,6 +3621,38 @@ Value is calculated by read number of sectors multiplied by 512.</description>
           <macro>{$STEAL_WARN}</macro>
           <value>20</value>
         </macro>
+        <macro>
+          <macro>{$VOL_FREE_INODE_AVERAGE}</macro>
+          <value>5</value>
+        </macro>
+        <macro>
+          <macro>{$VOL_FREE_INODE_HIGH}</macro>
+          <value>1</value>
+        </macro>
+        <macro>
+          <macro>{$VOL_FREE_INODE_INFORMATION}</macro>
+          <value>15</value>
+        </macro>
+        <macro>
+          <macro>{$VOL_FREE_INODE_WARNING}</macro>
+          <value>10</value>
+        </macro>
+        <macro>
+          <macro>{$VOL_FREE_SPACE_AVERAGE}</macro>
+          <value>5</value>
+        </macro>
+        <macro>
+          <macro>{$VOL_FREE_SPACE_HIGH}</macro>
+          <value>1</value>
+        </macro>
+        <macro>
+          <macro>{$VOL_FREE_SPACE_INFORMATION}</macro>
+          <value>15</value>
+        </macro>
+        <macro>
+          <macro>{$VOL_FREE_SPACE_WARNING}</macro>
+          <value>10</value>
+        </macro>
       </macros>
       <templates>
         <template>
@@ -4177,6 +4269,44 @@ Value is calculated by read number of sectors multiplied by 512.</description>
       </dependencies>
       <tags/>
     </trigger>
+    <trigger>
+      <expression>{OS Linux:net.tcp.port[,{$SVC_SSH_PORT}].count(#3,0)}=3</expression>
+      <recovery_mode>0</recovery_mode>
+      <recovery_expression/>
+      <name>NET::port::ssh unreachable</name>
+      <correlation_mode>0</correlation_mode>
+      <correlation_tag/>
+      <url/>
+      <status>0</status>
+      <priority>3</priority>
+      <description/>
+      <type>0</type>
+      <manual_close>0</manual_close>
+      <dependencies>
+        <dependency>
+          <name>SYS::processes::sshd is not running</name>
+          <expression>{OS Linux:proc.num[sshd].last(0)}&lt;1</expression>
+          <recovery_expression/>
+        </dependency>
+      </dependencies>
+      <tags/>
+    </trigger>
+    <trigger>
+      <expression>{OS Linux:net.tcp.service[ssh,,{$SVC_SSH_PORT}].count(#3,0)}=3</expression>
+      <recovery_mode>0</recovery_mode>
+      <recovery_expression/>
+      <name>SVC::ssh is down</name>
+      <correlation_mode>0</correlation_mode>
+      <correlation_tag/>
+      <url/>
+      <status>0</status>
+      <priority>3</priority>
+      <description/>
+      <type>0</type>
+      <manual_close>0</manual_close>
+      <dependencies/>
+      <tags/>
+    </trigger>
     <trigger>
       <expression>{OS Linux:net.tcp.service[ssh].count(#3,0)}=3</expression>
       <recovery_mode>0</recovery_mode>